Static task
static1
Behavioral task
behavioral1
Sample
088d5e872d3763132cc3c64c4710f249_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
088d5e872d3763132cc3c64c4710f249_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
088d5e872d3763132cc3c64c4710f249_JaffaCakes118
-
Size
53KB
-
MD5
088d5e872d3763132cc3c64c4710f249
-
SHA1
10db290b2fa43f36e31fca9659d73994b1b313e6
-
SHA256
cf5f945c01a8414a0b9ab98ab47dd5de202f0e7bbd15d2236388c4a922d46be5
-
SHA512
7c041d4b9e49a7673ae8befcd6ff3afb02279e40777c64b6339e48013735aa29747608d075063008f2940c6387562baae9c1d9523a04331c21f09ebbef64472a
-
SSDEEP
768:24iMFgLKeZUEXEOwGESyBpnUK3I1W6h+PVsuMeR0yjHzeEqLTEG5f/kE5K9:2XMDBEXkGFtDk/GIHzeEqLThkE5K9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 088d5e872d3763132cc3c64c4710f249_JaffaCakes118
Files
-
088d5e872d3763132cc3c64c4710f249_JaffaCakes118.exe windows:4 windows x86 arch:x86
f23e12467dfc720ea7cd45580d5ab67f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBitmapBits
CreateBrushIndirect
CreateHalftonePalette
CreatePalette
DeleteObject
GetCurrentPositionEx
CreateCompatibleBitmap
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ