Static task
static1
Behavioral task
behavioral1
Sample
28320c1d3a92778eb7985da6403d3ae0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28320c1d3a92778eb7985da6403d3ae0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28320c1d3a92778eb7985da6403d3ae0_JaffaCakes118
-
Size
53KB
-
MD5
28320c1d3a92778eb7985da6403d3ae0
-
SHA1
589ac8dbc54b7a686afa077f2bbad272198e37b0
-
SHA256
e5e4e99e0fb287b5c4d2d8a8ab349eb3661163bf77b0c6aaeee607c15d828aae
-
SHA512
4adc725013461f7729c21708775529bbd27a0ee02d6fec71a904c20f766f1e5c38d53fc3e0d0866cb5e82d8cc158077cc7d6892f8cdb54efef18c20d3d28041a
-
SSDEEP
1536:x0zqdQ2tjgK40An31deQFTCUxPMzO68wS/8R:xRdQ2A0014aWhzO68MR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28320c1d3a92778eb7985da6403d3ae0_JaffaCakes118
Files
-
28320c1d3a92778eb7985da6403d3ae0_JaffaCakes118.exe windows:5 windows x86 arch:x86
6ab196d62231f025c40818d057f823d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgA
GetOpenFileNameA
user32
UnregisterClassW
EndDeferWindowPos
GetSystemMetrics
InsertMenuW
IsWindowEnabled
GetDlgItemInt
IsWindow
CheckMenuItem
GetLastActivePopup
GetMessagePos
GetMessageTime
SetMenuItemBitmaps
IsWindowVisible
FindWindowExW
UnhookWindowsHookEx
ws2_32
WSAGetLastError
msvcrt
__doserrno
crypt32
CryptUnregisterOIDInfo
kernel32
Sleep
CreateEventW
MulDiv
FindNextFileW
GetFullPathNameW
VirtualAlloc
CopyFileW
GetShortPathNameW
CreateProcessW
GetProcessHeap
ResetEvent
GlobalAlloc
GlobalFree
SetLastError
GetFileAttributesW
lstrcmpiW
FindClose
HeapReAlloc
HeapFree
HeapAlloc
WideCharToMultiByte
FindFirstFileW
lstrlenA
CloseHandle
GetUserDefaultLCID
GetVersionExW
GetFileAttributesA
WaitForSingleObject
rpcrt4
RpcRevertToSelf
UuidToStringA
UuidCreate
RpcStringFreeW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE