Static task
static1
Behavioral task
behavioral1
Sample
28c8d8952d4abd6f131457d2376fa919_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28c8d8952d4abd6f131457d2376fa919_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28c8d8952d4abd6f131457d2376fa919_JaffaCakes118
-
Size
48KB
-
MD5
28c8d8952d4abd6f131457d2376fa919
-
SHA1
d033a37e5c698e87ecdc3c72fa3886b4d46c9420
-
SHA256
91264afa4090e1775b460cd8e58b178887385ad3945cc0039e9a86afdbaf0a1d
-
SHA512
1ee7b143f773f64e563d807d46b8ddf2c40a86d7e6e7a0ec8c3ed83dee3f0547832ad3c174cb9083c0b7a911b67935b48800a4e6e32bba3a3f1ecc14dadfa4e0
-
SSDEEP
384:o60AUmG3zbQXFWYcN0W8DQuqIk70iURBFVMotgdX+B3XgkMWArrxKxcemMTpAELI:Rp+zkXxnz0uqIgMFG0gkxs8KwpAIsl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28c8d8952d4abd6f131457d2376fa919_JaffaCakes118
Files
-
28c8d8952d4abd6f131457d2376fa919_JaffaCakes118.exe windows:5 windows x86 arch:x86
fdf0f1ed0883818098007fed0fef774c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
msvcrt
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
fopen
fprintf
fclose
exit
strcspn
strncpy
_stricmp
_strnicmp
__p__commode
kernel32
SetCurrentDirectoryA
CreateFileA
CloseHandle
LocalAlloc
GetPrivateProfileSectionA
LocalFree
FindFirstFileA
FindClose
FindNextFileA
lstrcmpA
DeleteFileA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE