Static task
static1
Behavioral task
behavioral1
Sample
28d7bb7d35289f058e37ee81c64797c8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28d7bb7d35289f058e37ee81c64797c8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28d7bb7d35289f058e37ee81c64797c8_JaffaCakes118
-
Size
344KB
-
MD5
28d7bb7d35289f058e37ee81c64797c8
-
SHA1
b8d3566b85f20549756936994e5f45b008b0d1db
-
SHA256
afbbeb9c0e739578e5168621375ebed3be6f0871f6993a471f11716326ae5647
-
SHA512
50e917d98ce89638752aab2caa96b99ba4de7570b10052f38e194460cd7defd02bc61496a5cd908e85fb89d6605fcf7d1a96167f56ab74d40f81e0175278d610
-
SSDEEP
6144:8Ncc55dKYG2Woa8BQJha3KX5XZb6cgrfFGt/2pqvhPnAOZSWp7jMWvbxa:8h55cY1WVc30t9grnpqvhXFp7jpjc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28d7bb7d35289f058e37ee81c64797c8_JaffaCakes118
Files
-
28d7bb7d35289f058e37ee81c64797c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
53759c05dfd35f4cd3ef7c586b1fb1ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetLastError
TlsGetValue
TlsSetValue
GetUserDefaultLCID
InitializeCriticalSection
HeapReAlloc
GetCommandLineA
TlsAlloc
HeapCreate
VirtualQuery
GetVersionExA
GetTickCount
GetStartupInfoA
GetModuleFileNameA
GetOEMCP
CompareStringW
GetCPInfo
HeapSize
TlsFree
MapViewOfFileEx
QueryPerformanceCounter
CompareStringA
CopyFileExA
SetEvent
WideCharToMultiByte
IsValidLocale
GetCurrentThread
UnhandledExceptionFilter
GetTimeZoneInformation
GetPrivateProfileStringA
SetEnvironmentVariableW
GetModuleHandleA
GetLocaleInfoW
GetStringTypeA
VirtualFree
HeapDestroy
FreeEnvironmentStringsA
LoadLibraryA
GetStringTypeW
IsBadWritePtr
GetLocaleInfoA
CloseHandle
CreateMutexA
GetCurrentThreadId
LCMapStringA
GetTimeFormatA
GetStdHandle
SetFilePointer
GetEnvironmentStrings
GetProcAddress
SetEnvironmentVariableA
FreeEnvironmentStringsW
SetLastError
SetStdHandle
ExitProcess
GetDateFormatA
InterlockedExchange
WriteConsoleInputW
ReadFile
DeleteCriticalSection
VirtualProtect
EnumSystemLocalesA
GetACP
HeapAlloc
GetFileType
GetEnvironmentStringsW
OpenMutexA
WriteFile
LCMapStringW
GetSystemInfo
TransactNamedPipe
TerminateProcess
GetCurrentProcessId
EnterCriticalSection
RtlUnwind
HeapFree
SetHandleCount
VirtualAlloc
FlushFileBuffers
GetCurrentProcess
IsValidCodePage
LeaveCriticalSection
MultiByteToWideChar
user32
CharNextExA
BeginPaint
FindWindowExA
ChangeDisplaySettingsW
wsprintfW
CreateMDIWindowW
ValidateRgn
MessageBoxIndirectA
DlgDirSelectComboBoxExA
DdeGetLastError
GetMessageTime
DefWindowProcW
DdeNameService
DrawCaption
DestroyWindow
GetPriorityClipboardFormat
EmptyClipboard
TranslateAcceleratorA
InsertMenuItemW
MonitorFromRect
GetMessageW
ModifyMenuW
GetClientRect
CreateIconFromResource
GetMenuContextHelpId
CreateWindowExA
GetKeyboardLayoutNameA
EnumDisplaySettingsW
SetRectEmpty
ChildWindowFromPoint
GetSystemMenu
BringWindowToTop
RegisterClassExA
CallMsgFilter
wsprintfA
FrameRect
EndDeferWindowPos
MsgWaitForMultipleObjectsEx
AttachThreadInput
AdjustWindowRectEx
DrawTextA
GetPropW
RegisterClassA
ShowWindow
CharToOemW
GetMonitorInfoW
MessageBoxW
shell32
DragQueryPoint
comdlg32
GetFileTitleA
FindTextW
PrintDlgA
gdi32
CopyMetaFileW
SetDeviceGammaRamp
PatBlt
Arc
FlattenPath
GetCharacterPlacementA
SelectClipRgn
GetTextAlign
EndDoc
GetTextCharsetInfo
GetTextExtentPoint32A
CreateFontA
FloodFill
CreateBrushIndirect
ResizePalette
GetRgnBox
DeviceCapabilitiesExA
GetMetaFileA
GetROP2
ModifyWorldTransform
CombineTransform
GetObjectType
advapi32
CryptEnumProvidersA
CryptSignHashW
CryptDuplicateKey
CreateServiceW
StartServiceA
CryptEncrypt
CryptHashData
RegQueryValueExA
RegQueryInfoKeyW
RegEnumValueA
RegEnumKeyExW
LookupAccountNameW
LogonUserW
CryptDeriveKey
CryptDestroyKey
InitiateSystemShutdownW
CryptHashSessionKey
LookupPrivilegeValueW
RegCreateKeyA
StartServiceW
RegLoadKeyW
comctl32
ImageList_GetIcon
ImageList_Read
InitCommonControlsEx
ImageList_Merge
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ