Static task
static1
Behavioral task
behavioral1
Sample
28edcfa645dd727280e108f87b5c35cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28edcfa645dd727280e108f87b5c35cc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28edcfa645dd727280e108f87b5c35cc_JaffaCakes118
-
Size
12KB
-
MD5
28edcfa645dd727280e108f87b5c35cc
-
SHA1
9f74832e9bb91200e01af06dc46b86a182fcd59d
-
SHA256
939d67c9c478441c338017cafeb7f839c35531bf7247e6c96c66cc997bcd076f
-
SHA512
2447d920312a1d20861d358df5b1279c30f71b6e1600b275453f9609216250dbc32a61d124968f0f927434a3ac89741701212ab58b6f41dc93f8478fccf0610a
-
SSDEEP
192:JHfjW7klPvJenlVOsTp/b+vbm7oW6SkvpKfx1xaUM2pm:JHfK7klPvJefJTp/bamz6Skvu1FM2I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28edcfa645dd727280e108f87b5c35cc_JaffaCakes118
Files
-
28edcfa645dd727280e108f87b5c35cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
2072f27fa37908345fad94284b5fc16d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
wsprintfA
kernel32
GetCommandLineA
GetCurrentDirectoryA
GetLastError
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemDirectoryA
GetSystemTime
OpenMutexA
OpenProcess
ExitProcess
Process32Next
ReleaseMutex
RtlZeroMemory
Sleep
TerminateProcess
CreateToolhelp32Snapshot
WritePrivateProfileStringA
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
CreateMutexA
CreateFileA
CreateDirectoryA
CloseHandle
Process32First
WriteFile
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFileExA
InternetSetStatusCallbackA
advapi32
ControlService
CloseServiceHandle
OpenSCManagerA
OpenServiceA
QueryServiceStatus
StartServiceA
CreateServiceA
DeleteService
shell32
ShellExecuteA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ