Static task
static1
Behavioral task
behavioral1
Sample
28ceea7ceeccab5148cf990cab7b5768_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28ceea7ceeccab5148cf990cab7b5768_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28ceea7ceeccab5148cf990cab7b5768_JaffaCakes118
-
Size
192KB
-
MD5
28ceea7ceeccab5148cf990cab7b5768
-
SHA1
ce9ab369f0ea0fef90f0b2d87e7638d10345b823
-
SHA256
6e15f720b855b0b49ddfae370d5aec6dee403cc06526744a229c399acef1f9eb
-
SHA512
cc46f19eed6a495bf3f4450027a0f4fdc9fd9012470c3cf1b264e9bc63eeb3a84adbcfd60537d3ebf0769af9ac8da728fed6397711f6cbb4474c570639a825ac
-
SSDEEP
6144:GDcn4wYs31X5d+W67do3F69knm82scruwzOU:G4n4g3EW0q3g+mZF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ceea7ceeccab5148cf990cab7b5768_JaffaCakes118
Files
-
28ceea7ceeccab5148cf990cab7b5768_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9a78214e102a22926deb12744217535
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueA
RegSetValueW
kernel32
AddAtomA
ConvertThreadToFiber
CreateFiber
CreateFileW
CreateThread
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
InitializeCriticalSection
LeaveCriticalSection
ReadFile
SetUnhandledExceptionFilter
SwitchToFiber
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
memset
signal
strcpy
strlen
wcscpy
user32
CallNextHookEx
CheckMenuRadioItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CreateMenu
CreateWindowExW
DefFrameProcW
DefWindowProcW
DeferWindowPos
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawStateW
DrawTextW
EnableWindow
EndDeferWindowPos
EndPaint
EnumClipboardFormats
EnumDisplaySettingsW
FillRect
GetAsyncKeyState
GetClassNameW
GetClipboardData
GetCursorPos
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetMenuState
GetMenuStringW
GetMessageTime
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetUpdateRgn
GetWindowDC
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuW
InvalidateRect
IsIconic
KillTimer
LoadBitmapW
LoadCursorW
LoadImageW
MessageBeep
MessageBoxW
ModifyMenuW
OpenClipboard
PeekMessageW
PostMessageW
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterHotKey
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetTimer
SetWindowPos
SetWindowsHookExW
ShowCaret
SystemParametersInfoW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UnregisterHotKey
ValidateRect
WindowFromPoint
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 37KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ