Static task
static1
Behavioral task
behavioral1
Sample
28ea611f7bec4878e4c8105710638be4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28ea611f7bec4878e4c8105710638be4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28ea611f7bec4878e4c8105710638be4_JaffaCakes118
-
Size
208KB
-
MD5
28ea611f7bec4878e4c8105710638be4
-
SHA1
bf35e9b21da04d6ea68a3795cf6730397ac7e7e7
-
SHA256
2fd38ad790a82ea5da0a8c08f3f54011dc13fe34a3e19e9d594e31ad841cdd65
-
SHA512
d723be0aa71306b3a885cd67da02c3114630df7393bf318eed938f2fa5f3a45b91acb5a202cc8d8447d4ef82d20eac3e692642a5547c7caacdbde623433b3e04
-
SSDEEP
768:c9cU3YQOk4/tdNKIdPuqjCO+GcGtEtpxoAMlIUxgHB88atAGl:+YQsl7dPkPGyt/oDeuOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ea611f7bec4878e4c8105710638be4_JaffaCakes118
Files
-
28ea611f7bec4878e4c8105710638be4_JaffaCakes118.exe windows:4 windows x86 arch:x86
51fe54937aed0e201591613b3d94ab63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
DuplicateHandle
GetSystemTimeAsFileTime
GetFileSize
CreateDirectoryA
GetProcAddress
VirtualFree
VirtualAlloc
AddAtomA
GetModuleHandleA
QueueUserAPC
GetCurrentThread
CloseHandle
CreateEventA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
user32
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
MsgWaitForMultipleObjectsEx
PeekMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
PostMessageA
DestroyWindow
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ