Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e28b273558d644554af689be0c23dc18.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e28b273558d644554af689be0c23dc18.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e28b273558d644554af689be0c23dc18
-
Size
34KB
-
MD5
e28b273558d644554af689be0c23dc18
-
SHA1
32f8ae4be297c3b36d632d2049ab874843f777d2
-
SHA256
4fb1a88d43a9622e7b1d64f878423c63fb6cbc0b798282483d97c14f4df5e40a
-
SHA512
38045ed4746b6f8bbfa7405b047fca56a1b861b06ae5c3e440e71f3a78f249067d8d9b01f3fafa6ec759c4974efa78fa6a7dd0c6eadde0658d6fc6a56fec5bd8
-
SSDEEP
768:84BenIjX+JzqYt4ppCVOGI0jROvkIoumBfVk2U9:6Ir+JzqYt4Ckf08v2jf9U9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e28b273558d644554af689be0c23dc18
Files
-
JaffaCakes118_e28b273558d644554af689be0c23dc18.exe windows:5 windows x86 arch:x86
ee68dac18e8578fdda84605161b0796b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
kernel32
MultiByteToWideChar
GetPrivateProfileStringA
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcpyA
GetCommandLineA
LocalFree
lstrcatA
lstrlenA
LocalAlloc
GetSystemDirectoryA
lstrcmpiA
GetVersionExA
FormatMessageA
WriteFile
CreateFileA
MoveFileA
DeleteFileA
SetFileAttributesA
lstrcpynA
GetFileAttributesA
GetWindowsDirectoryA
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
ExitProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery
user32
MessageBoxA
CharNextA
ExitWindowsEx
LoadStringA
wsprintfA
shlwapi
PathCombineA
StrStrIA
SHRegGetUSValueA
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE