Static task
static1
Behavioral task
behavioral1
Sample
28bd546ac0c4c47ae08ca566f06791f6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28bd546ac0c4c47ae08ca566f06791f6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28bd546ac0c4c47ae08ca566f06791f6_JaffaCakes118
-
Size
348KB
-
MD5
28bd546ac0c4c47ae08ca566f06791f6
-
SHA1
7ecaf9c7b0b06f9d8183ec81539681882b50c3fe
-
SHA256
5cbaca0230e1929bda97f764025d686ab04b920604b5702c7e774b4340fd4190
-
SHA512
a8ee226cff872baf9c61fc25bc511c99b037592c9bef3a418656ae3a7f3a322739bbb40ebd7e255b0b6f756564e04c31c0ebf71fdf90e89fe07bbb9fb65382b5
-
SSDEEP
6144:tbymkt/9J2ZhBHklWfwk156/u90/rV13RcS5+70rpGjqT:teNPWhBUWfwkD6CGBMe+or
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28bd546ac0c4c47ae08ca566f06791f6_JaffaCakes118
Files
-
28bd546ac0c4c47ae08ca566f06791f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a25085660bdde199ef7796af0a605b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
SetCommTimeouts
FindAtomW
WritePrivateProfileSectionA
GetBinaryTypeA
SetupComm
GetThreadPriority
WriteConsoleInputW
CreateProcessW
GetTempPathW
SizeofResource
ReadConsoleW
WritePrivateProfileSectionW
GetUserDefaultLCID
FindResourceExW
WriteFileEx
SetLastError
GetLongPathNameW
GetModuleHandleA
CreateDirectoryW
InterlockedCompareExchange
DisconnectNamedPipe
ReadConsoleOutputA
GetTimeFormatA
SetConsoleTextAttribute
GetLargestConsoleWindowSize
GetCompressedFileSizeW
GetSystemTime
QueryPerformanceCounter
SetConsoleOutputCP
EnumResourceNamesW
QueryDosDeviceA
OutputDebugStringW
CopyFileA
EnterCriticalSection
GetTempPathA
TlsAlloc
SetConsoleMode
IsValidCodePage
GetDateFormatW
VirtualLock
AddAtomA
GetFileAttributesA
GenerateConsoleCtrlEvent
DefineDosDeviceA
lstrcatA
ClearCommBreak
EnumCalendarInfoW
InterlockedDecrement
WriteConsoleOutputAttribute
GetProcessWorkingSetSize
WritePrivateProfileStructA
GetSystemInfo
SetThreadPriority
CreateFileA
ReleaseMutex
SetSystemTime
GetExitCodeProcess
ReleaseSemaphore
FindNextFileW
BackupSeek
OutputDebugStringA
GetConsoleCursorInfo
_lclose
GetTapeParameters
GetCurrentProcess
FreeLibraryAndExitThread
EscapeCommFunction
GetCommProperties
GetNumberFormatA
EraseTape
SetHandleInformation
GetCurrentDirectoryA
GetPrivateProfileSectionNamesA
GetProfileIntW
UpdateResourceA
GlobalDeleteAtom
GetProcessTimes
SetTapePosition
SetEndOfFile
MulDiv
GetSystemTimeAsFileTime
CopyFileW
SuspendThread
ReadDirectoryChangesW
ScrollConsoleScreenBufferA
GetVersionExA
GetCommandLineA
VirtualProtect
CopyFileExW
ExitProcess
user32
DrawIcon
GetDesktopWindow
GetDialogBaseUnits
SetWindowWord
FrameRect
RegisterHotKey
CreateWindowExA
CreateDialogParamW
EnumDisplayDevicesW
SwitchDesktop
CharUpperBuffA
GetProcessWindowStation
MapVirtualKeyExW
RegisterClassExA
SetWindowPlacement
GetClassInfoW
MessageBoxExA
IsIconic
GetDCEx
CreateAcceleratorTableA
SetWindowRgn
DestroyCursor
SetFocus
GetPropA
DestroyCaret
ChildWindowFromPointEx
GetWindowLongW
BringWindowToTop
CreateWindowExW
gdi32
GetCharWidth32W
PlayEnhMetaFileRecord
AddFontResourceA
SetArcDirection
ExcludeClipRect
GetDIBColorTable
FrameRgn
GetStretchBltMode
CreatePolyPolygonRgn
LPtoDP
GetCharWidthA
comdlg32
ChooseColorW
CommDlgExtendedError
ReplaceTextW
advapi32
AddAccessAllowedAce
GetSecurityInfo
RegCloseKey
RegSetValueExW
QueryServiceObjectSecurity
SetSecurityDescriptorGroup
EnumServicesStatusW
AbortSystemShutdownA
RegEnumKeyExW
UnlockServiceDatabase
CryptVerifySignatureW
CopySid
BuildSecurityDescriptorW
GetCurrentHwProfileW
RegQueryInfoKeyW
GetSecurityDescriptorSacl
MapGenericMask
IsValidAcl
QueryServiceLockStatusW
InitializeAcl
DeleteAce
RegSetValueA
RegSetKeySecurity
ControlService
CryptImportKey
RegEnumKeyA
InitializeSid
CryptSetKeyParam
LookupAccountSidA
OpenProcessToken
GetSecurityDescriptorGroup
shell32
SHGetSpecialFolderLocation
ole32
OleSetContainedObject
CoSetProxyBlanket
CoMarshalInterface
OleRegEnumVerbs
StgOpenStorageEx
oleaut32
SetErrorInfo
LoadTypeLibEx
VariantCopyInd
CreateErrorInfo
SafeArrayCreate
DispGetIDsOfNames
comctl32
ImageList_Draw
ImageList_GetDragImage
shlwapi
PathStripPathW
UrlCanonicalizeW
SHGetValueA
PathGetCharTypeA
PathIsSameRootW
wnsprintfA
SHRegOpenUSKeyW
StrStrIW
StrCatBuffW
StrRChrA
setupapi
SetupDiClassGuidsFromNameW
SetupIterateCabinetW
SetupDiEnumDriverInfoW
SetupLogErrorW
SetupDiEnumDeviceInfo
Sections
.text Size: 312KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE