Static task
static1
Behavioral task
behavioral1
Sample
d28cfb99a15bf8f8644f94f45e76d678_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d28cfb99a15bf8f8644f94f45e76d678_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d28cfb99a15bf8f8644f94f45e76d678_JaffaCakes118
-
Size
156KB
-
MD5
d28cfb99a15bf8f8644f94f45e76d678
-
SHA1
7dfd728a7c1d7b5b2e3c76607701ffe9c04607b0
-
SHA256
c34383368cb894edcbef38a293f34a125f29349600d5697c063538059be473c1
-
SHA512
de70ab498865bafdbd04fa7b5f263f462a17adc8d34c29b7b53148f4568ed479d8fe6356e5c5864a7aca40f82e0a53bb8a37c6049eaab6bc54f902fe305a933c
-
SSDEEP
3072:gBAFVNt24gRk4RSSYI2+SeK9H7QSwdqLeQ5ZzrCwHv94TmKsw7/:gBF4j4RSSc+SXwdqqEZzrzHv9KmK77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28cfb99a15bf8f8644f94f45e76d678_JaffaCakes118
Files
-
d28cfb99a15bf8f8644f94f45e76d678_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1c057579d84950df65c9c0e868928dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetFileInfoW
gdi32
GetOutlineTextMetricsW
CreateFontIndirectW
DeleteObject
SelectObject
GetTextMetricsW
AddFontResourceExW
psapi
GetProcessMemoryInfo
ole32
CoRegisterClassObject
StringFromGUID2
CoInitialize
CoUninitialize
CoTaskMemFree
CoRevokeClassObject
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
StringFromCLSID
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
GlobalAlloc
lstrcmpiW
FillConsoleOutputAttribute
GetACP
OutputDebugStringW
GetProcessWorkingSetSize
FindClose
GlobalFree
LockResource
GetTickCount
lstrlenW
GetLastError
GetCPInfo
EnumResourceNamesW
lstrcpyA
FreeEnvironmentStringsW
CreateFileMappingW
lstrcpyW
WideCharToMultiByte
InitializeCriticalSection
MultiByteToWideChar
GetModuleHandleW
user32
PostThreadMessageW
CharNextW
DispatchMessageW
GetWindowLongA
GetDC
GetMessageW
SetTimer
TranslateMessage
CharUpperW
KillTimer
wsprintfW
UnregisterClassA
advapi32
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ