Static task
static1
Behavioral task
behavioral1
Sample
28fb1373cc01e9ad0f22b51631c7a318_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28fb1373cc01e9ad0f22b51631c7a318_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28fb1373cc01e9ad0f22b51631c7a318_JaffaCakes118
-
Size
22KB
-
MD5
28fb1373cc01e9ad0f22b51631c7a318
-
SHA1
f2744ebbab39b98e3731765d8598b1464634f689
-
SHA256
de66c1bc7ab06857eba121a36a7050a79d34fb1be4a1077aa5f31bc1b18e6c19
-
SHA512
63b44a6d9944815da50f05deba6a35dcfd9cc97c3b1d0e1e875fedd0af6af5ee34a0b461deaaddca39e6457204c71be34a2aa273b6cd662a29163b3ac0c15063
-
SSDEEP
384:QNPosRYxYEZGQ1Ztznis4c0kuwB0XD8ToMu8RTJjq:QNPbuYMGQ1X+s4c0k2zqu8Rt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28fb1373cc01e9ad0f22b51631c7a318_JaffaCakes118
Files
-
28fb1373cc01e9ad0f22b51631c7a318_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b8f71e5d5ba714a85dd83363fbcc491
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
DeleteFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetSystemDirectoryA
WaitForSingleObject
SetThreadPriority
CreateThread
Sleep
TerminateProcess
OpenProcess
CreateEventA
OpenEventA
Process32Next
Process32First
CreateToolhelp32Snapshot
Thread32Next
Thread32First
GetModuleFileNameA
LoadLibraryA
ExitProcess
GetWindowsDirectoryA
CreateFileA
GetFileTime
SetFileTime
OutputDebugStringA
GetCurrentProcess
GetCurrentThreadId
CloseHandle
user32
GetWindow
FindWindowA
SendMessageA
GetWindowTextA
GetClassNameA
PostMessageA
GetThreadDesktop
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton
CloseDesktop
wsprintfA
EnumThreadWindows
gdi32
Chord
CancelDC
CloseEnhMetaFile
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegCloseKey
RegSetValueExA
OpenProcessToken
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ