Static task
static1
Behavioral task
behavioral1
Sample
28a054d01dea127ae0a3a4d82fb14116_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28a054d01dea127ae0a3a4d82fb14116_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28a054d01dea127ae0a3a4d82fb14116_JaffaCakes118
-
Size
291KB
-
MD5
28a054d01dea127ae0a3a4d82fb14116
-
SHA1
9cae960315b29b1342cb25056fe25321ac93e4b6
-
SHA256
722c01204a223348e0e24d16bd45900971e9d81510b4bb200535a1756dc01939
-
SHA512
eb063fa29924c7d5e8ed6177c84ce7440290c1f88a9e327ae4ab1885ba6107b56eb68f98c24ee9a9cbd28e52a0ccd57828cb9be16e338d4c8d381d5ab77a3774
-
SSDEEP
6144:A8mr6mhZTfeKG0E000pz59O3f+9ZsBNmOpQFALUDk/eHn8A:MMB5YPxo/Ox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a054d01dea127ae0a3a4d82fb14116_JaffaCakes118
Files
-
28a054d01dea127ae0a3a4d82fb14116_JaffaCakes118.exe windows:4 windows x86 arch:x86
be152d60287a605a18f44284a296189b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CreateEventA
CreateMutexA
CreateProcessA
CreateThread
EnterCriticalSection
ExitThread
GetCurrentProcess
GetLocalTime
GetStartupInfoA
GetTickCount
GetVersionExA
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MoveFileW
SetEvent
Sleep
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
lstrcpynA
lstrlenA
user32
DrawFocusRect
GetClassNameW
GetDlgItem
GetLastActivePopup
GetMenuState
GetShellWindow
GetWindowLongW
GetWindowThreadProcessId
LoadBitmapW
MessageBoxA
SendDlgItemMessageW
SetRect
ShowWindow
TileWindows
UnregisterHotKey
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ