Static task
static1
Behavioral task
behavioral1
Sample
88996e2fe7be3a0bd48f2342547b496c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88996e2fe7be3a0bd48f2342547b496c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88996e2fe7be3a0bd48f2342547b496c_JaffaCakes118
-
Size
294KB
-
MD5
88996e2fe7be3a0bd48f2342547b496c
-
SHA1
5a3b8bde3e7b8f19c99fb19301f595c5bb6eaa91
-
SHA256
baab0274aa74fda15f1b574b99b4687a7c331788452f6718adb7f917de060799
-
SHA512
a73ca00e4f2daefbf9ed7708e497869e79376f85d5a74f81f2cd3633692c13493dd20381128286c5b0d98a06a42df6b11aa6096fa915997c2e4f4be9230d4fca
-
SSDEEP
6144:l8m+Lgkx5poyWvbpLH8SEmH4Jvp79DU/Aji3ObEB64tLyY9/YwOQsh9u:l8fgw5pZ6Fz8SEA4JvLDEAjWObg64tOg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88996e2fe7be3a0bd48f2342547b496c_JaffaCakes118
Files
-
88996e2fe7be3a0bd48f2342547b496c_JaffaCakes118.exe windows:1 windows x86 arch:x86
148483ba30687445d1f4c067f5405565
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareFileTime
GetCurrentThread
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
IsDebuggerPresent
LoadLibraryA
SearchPathA
SetProcessAffinityMask
Sleep
SleepEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA
gdi32
CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor
user32
AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx
Sections
.dhgb Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cert Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abnh Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rkgh Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ