Static task
static1
Behavioral task
behavioral1
Sample
88846b314fdfe5893b843b6c8d51704f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88846b314fdfe5893b843b6c8d51704f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88846b314fdfe5893b843b6c8d51704f_JaffaCakes118
-
Size
5KB
-
MD5
88846b314fdfe5893b843b6c8d51704f
-
SHA1
e1826aaa4ae22504cf9c7e42c79a41908515a668
-
SHA256
a7dd04028833ca654f635f9bb73b602131cd47a2facc6b8d87c69c4f6c43ee83
-
SHA512
b23f547e3ef13a86d298e7f0c3b3a035e9bf816e3da28d1ed4b18f4c508a78c40aefbe05e96ec1d1bfc032fd99c1945c33b8be6d6a45e68880475d4fb5253232
-
SSDEEP
96:1WuhGWv/KeyP1PLK2GWohFtfhj10OTWbHj/UeTbz6:Auh3/vsO2nCoeeTb+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88846b314fdfe5893b843b6c8d51704f_JaffaCakes118
Files
-
88846b314fdfe5893b843b6c8d51704f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c37f4f1fa1d0944154d01e1ecf7520f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtProtectVirtualMemory
memcpy
kernel32
GetModuleHandleA
GetProcAddress
GetCurrentProcess
LoadLibraryW
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 258B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ