Static task
static1
Behavioral task
behavioral1
Sample
88a04e8e647e03e2c3669b8e264f495d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88a04e8e647e03e2c3669b8e264f495d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88a04e8e647e03e2c3669b8e264f495d_JaffaCakes118
-
Size
42KB
-
MD5
88a04e8e647e03e2c3669b8e264f495d
-
SHA1
33d9a3250970584de2a19b026738e793057ad746
-
SHA256
167ea4a4e20e139f6e4a98063f2391171a7f1419b7af264ffce64686385a6adc
-
SHA512
4e03386fdaf947f54267311681501941015cce8e28c00fb824fe110e7babf4ac922fbb00e921deec6646c70c8951b2420055d4b6bdea137198741f5dce9a9fb9
-
SSDEEP
768:1YSpI/Li6evW+frB90A30HC037Z0Ac0lL0oksmUiZKgKyAkAPP+N4Pf/IVSDmuwi:2DjpepOW1pBsWczDSY3DM4aljI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88a04e8e647e03e2c3669b8e264f495d_JaffaCakes118
Files
-
88a04e8e647e03e2c3669b8e264f495d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 649KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ