Static task
static1
Behavioral task
behavioral1
Sample
88a9e27fdd24e57125b924b1db6128a6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88a9e27fdd24e57125b924b1db6128a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88a9e27fdd24e57125b924b1db6128a6_JaffaCakes118
-
Size
44KB
-
MD5
88a9e27fdd24e57125b924b1db6128a6
-
SHA1
00320e4c4809da975ccf377b7457abfac72b5722
-
SHA256
b9fd19ae2abe4f265ba3c6b13136fd7c309c1dfb6a8e3a0b9b03104b8b640e2a
-
SHA512
f5c8af78b6523fc2a46cd292f16b3913cc5553f4afb280afb394a97c95e4e70f24a10735fbed387929d97b41075120e1221d19d255c26dd2fb42a4dd3511fccc
-
SSDEEP
768:wb1tIvQoSKNkSz/HtShYFxhUm2Y6cE8iNJI2JILBW/7+el/nv70oUVKkNjomOaS:wb1tA9Xk2/HIhoMlcliC2JIL2j/nw9K3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88a9e27fdd24e57125b924b1db6128a6_JaffaCakes118
Files
-
88a9e27fdd24e57125b924b1db6128a6_JaffaCakes118.exe windows:5 windows x86 arch:x86
6f77addfb83e243d9a4c5bd1a4944d8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
GetPrivateObjectSecurity
IsTextUnicode
LogonUserA
kernel32
ReadFile
CloseHandle
CreateFileA
RemoveDirectoryA
SetConsoleMode
HeapSize
Sections
.zqzcj Size: 36KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hen Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rih Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tkh Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE