Static task
static1
Behavioral task
behavioral1
Sample
088f4c003b0c7dd1623de9ab23fbcb7d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
088f4c003b0c7dd1623de9ab23fbcb7d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
088f4c003b0c7dd1623de9ab23fbcb7d_JaffaCakes118
-
Size
30KB
-
MD5
088f4c003b0c7dd1623de9ab23fbcb7d
-
SHA1
f8a63ab80288a7cd24da76329159bac1991b845b
-
SHA256
6921f604c427de6c4c40a7354f14b19046e5a6dbb6719b033733e2abed5c0851
-
SHA512
f55e737e3488d29e0221d50efd37fe35cda28f97d5772f03174fbcc50d11ae443d6bd8a69fc28c72a18adb37c7fc7122b739c7436143da081915d9868b801522
-
SSDEEP
768:kB7uaarL5uNEgFQNhIueZWANetZNaeNRbaT9:kB6aaP5uEgFIhIu0NeYeNR2J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 088f4c003b0c7dd1623de9ab23fbcb7d_JaffaCakes118
Files
-
088f4c003b0c7dd1623de9ab23fbcb7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbc762014ee9e7d9d53fc661318586ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
LookupPrivilegeValueA
shell32
SHGetSpecialFolderLocation
ole32
CoCreateGuid
oleaut32
VariantClear
psapi
GetModuleFileNameExA
Sections
.text Size: 23KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE