Static task
static1
Behavioral task
behavioral1
Sample
28f8279b22b84e7c5b411e31648223a0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28f8279b22b84e7c5b411e31648223a0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
28f8279b22b84e7c5b411e31648223a0_JaffaCakes118
-
Size
158KB
-
MD5
28f8279b22b84e7c5b411e31648223a0
-
SHA1
014d9b6b9d034805ffe4155dc556807172315d8f
-
SHA256
00ae1552b5593defabcdbe7d56e1e5156cc458abd9279b38eacb849197e9a0be
-
SHA512
0d757a882507e30024fb9f52dcd1f84304cee9eacf6f8475fae87eef5033ba6c6bd17ab94dc557c5e58995519dced880f3c7b0c4dee3598b8c6f5c599b126e44
-
SSDEEP
3072:Qo/8GzmsFogZO4bdLUzKTGTV0WJ2ZZ0uDiCC9+v0a9ot6nsnm0VyIOK5:QPGzFFBLRGTVyP0upvc6smP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f8279b22b84e7c5b411e31648223a0_JaffaCakes118
Files
-
28f8279b22b84e7c5b411e31648223a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
4f7d0dbadc8feb85d03d9cc5b6a578bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetFolderPathW
SHFileOperationW
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
shlwapi
PathAppendW
PathRemoveFileSpecW
SHGetValueW
PathCombineW
PathFileExistsW
kernel32
FillConsoleOutputAttribute
MoveFileW
GetProcessPriorityBoost
GetFullPathNameW
EnumResourceNamesW
FreeEnvironmentStringsW
GetShortPathNameW
CompareFileTime
SearchPathW
SetFileTime
ole32
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoInitialize
comctl32
PropertySheetW
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
IsWindow
SetWindowTextW
LoadIconW
IsDlgButtonChecked
GetDC
PostQuitMessage
IsWindowEnabled
DestroyWindow
SetWindowLongW
PostMessageW
ReleaseDC
GetDlgCtrlID
GetFocus
CreateCursor
MsgWaitForMultipleObjects
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ