Static task
static1
Behavioral task
behavioral1
Sample
088c7c620f0925d3cb9c2bcd362e932a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
088c7c620f0925d3cb9c2bcd362e932a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
088c7c620f0925d3cb9c2bcd362e932a_JaffaCakes118
-
Size
16KB
-
MD5
088c7c620f0925d3cb9c2bcd362e932a
-
SHA1
d19f1f9b3405f061d900a5528c48ced168cd13f4
-
SHA256
d262cbece84f9f95d69ef6f504f1b10fe1c142a9066f0dac35656fb790daa97a
-
SHA512
89eb1d7fdf012d6e6186e39ea006708f1a74570cae2689676e39bcfa62a81d24ca6bc980e4be73652b96bc15a58e285ab6bc902ccf84884520b9273fc01a5790
-
SSDEEP
192:KcffuJFe11e06Dgf1Jm7q67lXeneTiLXngI3DjPiGQs6k3Dt9s5Q7ZC46:KOWGWNDaJm7b1QegQITjPiG5GQAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 088c7c620f0925d3cb9c2bcd362e932a_JaffaCakes118
Files
-
088c7c620f0925d3cb9c2bcd362e932a_JaffaCakes118.exe windows:4 windows x86 arch:x86
ed24de5ee90a423d6c7bee6b1cec9b49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
msvcrt
_iob
Sections
.data Size: - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE