Static task
static1
Behavioral task
behavioral1
Sample
28b8fcb1f88e0dc772c9b865c0aa2d9b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28b8fcb1f88e0dc772c9b865c0aa2d9b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28b8fcb1f88e0dc772c9b865c0aa2d9b_JaffaCakes118
-
Size
445KB
-
MD5
28b8fcb1f88e0dc772c9b865c0aa2d9b
-
SHA1
07251cf0fe9dd3636eef773e15949dee964d750b
-
SHA256
7d73d91e0ed137a7fdb8cebfd96e420ded9939323293f392950a580d0054a9ab
-
SHA512
39ffb799b82c9944f3fb84bc470ecf7871795f271daa29dccc6d30552529c1f646c90b4d07980092ac8c92c1f8adb4435247521cf6506ae48b1b8e7af7b15ecd
-
SSDEEP
384:X4hrkZAVmMMT/fPUfD/Ts7TnzEINfGmtxavvcsmgioTRqkBWSPf4Ko:X4h3VMsTs7TzEI5GndmQbto
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b8fcb1f88e0dc772c9b865c0aa2d9b_JaffaCakes118
Files
-
28b8fcb1f88e0dc772c9b865c0aa2d9b_JaffaCakes118.exe windows:5 windows x86 arch:x86
ba90ad34d445f6ef742e06891b3f8020
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
HeapAlloc
GetProcessHeap
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
GetCommandLineW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
CreateProcessW
lstrcmpiW
lstrcpynW
CopyFileW
FormatMessageW
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
CreateDirectoryW
OutputDebugStringW
lstrcmpW
CompareStringW
GetSystemDefaultLangID
GetLastError
GetCurrentProcess
GetTickCount
GetStartupInfoA
user32
LoadKeyboardLayoutW
UnloadKeyboardLayout
advapi32
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
imm32
ImmInstallIMEW
ole32
CoInitialize
CoUninitialize
shlwapi
SHDeleteKeyW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
msvcrt
exit
_vsnwprintf
memmove
wcsstr
_c_exit
_except_handler3
_XcptFilter
_cexit
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 430KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE