Static task
static1
Behavioral task
behavioral1
Sample
28560ae2b149e0a99858aa2861c14dcb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28560ae2b149e0a99858aa2861c14dcb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28560ae2b149e0a99858aa2861c14dcb_JaffaCakes118
-
Size
83KB
-
MD5
28560ae2b149e0a99858aa2861c14dcb
-
SHA1
49a87245b8eb1d5d8eec824c9860bb1189b4f35c
-
SHA256
9dd39bbef90a511ff1d86117d1c43b3ffeb4709512599abeaac2fa8dc606c8a5
-
SHA512
cd4bd82301312156133d41e3d3e1f07c81ac1e9926b2953d934dd784f6c3329c62f16af3912dbcbbf98cd5921174fcd4861201078d506f45fd0d8e3ef7dfdb3a
-
SSDEEP
1536:3JOablE8dl7AFqoFZBEJdveWQ+WpbpJjEErxTWDTMqhGKYIZTET8bDQ:ZO38dVYqoF0jeWQ+abrjBkMqhGKZTbbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28560ae2b149e0a99858aa2861c14dcb_JaffaCakes118
Files
-
28560ae2b149e0a99858aa2861c14dcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
4300142e5e3566883ca2a9e0221e22ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasExesW
GetCPInfoExA
EnumResourceNamesW
SetFilePointer
GlobalAddAtomW
IsBadStringPtrA
GetPrivateProfileStringA
ReadFile
InterlockedFlushSList
GetSystemWow64DirectoryA
BaseProcessInitPostImport
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE