Static task
static1
Behavioral task
behavioral1
Sample
28b941e3df9ab2cde729821fb8e28d57_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28b941e3df9ab2cde729821fb8e28d57_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28b941e3df9ab2cde729821fb8e28d57_JaffaCakes118
-
Size
28KB
-
MD5
28b941e3df9ab2cde729821fb8e28d57
-
SHA1
701db719b627e6269ce7755940418c971d81fa59
-
SHA256
9a3c2e3a191069a41096f327557f00d58f702db818266742fbbae82981e0a4db
-
SHA512
bdfb4bf85cee9d9b29b41f0b3643f18e0b2b26937e840cc8c190d1ca7e5c6cc981508bf22a3a7baf4d8445594fc43dccd82c1dd002a249e7b2fecf3df627bd1d
-
SSDEEP
768:jz9pVTO8iNQS0Y+fIM0wph9qtETMMhEMhtPQ1M2:f93AdpoIMZTM2to1v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b941e3df9ab2cde729821fb8e28d57_JaffaCakes118
Files
-
28b941e3df9ab2cde729821fb8e28d57_JaffaCakes118.exe windows:4 windows x86 arch:x86
656bc56a160a1c53e555b836cd7defb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetACP
FileTimeToSystemTime
SetConsoleCP
SetStdHandle
CloseHandle
LoadResource
ExitProcess
WriteConsoleA
IsDebuggerPresent
GetSystemInfo
GetCurrentThreadId
GetThreadLocale
LoadLibraryW
GetUserDefaultLCID
lstrcmpW
FormatMessageW
RtlUnwind
HeapAlloc
SetLastError
GetModuleHandleA
UnmapViewOfFile
GetOEMCP
LocalAlloc
ReleaseSemaphore
VirtualProtect
GetTickCount
GetStartupInfoA
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
user32
InflateRect
GetParent
msvcrt
_exit
??0exception@@QAE@ABV0@@Z
__dllonexit
_onexit
_callnewh
lz32
LZClose
ole32
CoCancelCall
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE