Static task
static1
Behavioral task
behavioral1
Sample
88dbf823b18ff077fb79d0eb1da0850f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
88dbf823b18ff077fb79d0eb1da0850f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88dbf823b18ff077fb79d0eb1da0850f_JaffaCakes118
-
Size
87KB
-
MD5
88dbf823b18ff077fb79d0eb1da0850f
-
SHA1
c6d7a0f7fc09ecadfc3068fe0e703a2011dd4386
-
SHA256
4476c60bcb3cb65f27571a2e5a0b5f5d290a282eea64566707b3b63b626aa115
-
SHA512
7337b7d4cb85b8192c7d7a972d1f3734a0779ca253a7b7ec20d56d93443a51ddae4664ef90766eb443de68aabab88a2b559845be8615f9b6bbcacfe021c3c16b
-
SSDEEP
1536:1sLdWZNkOcch2GCFDGCPwGIdGsK9wSnTcEIW:m+kJpGCPw1dGsvSnQB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88dbf823b18ff077fb79d0eb1da0850f_JaffaCakes118
Files
-
88dbf823b18ff077fb79d0eb1da0850f_JaffaCakes118.exe windows:4 windows x86 arch:x86
29c3ceb74fec3fb22ce41cb9f63e22c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc40
ord1540
ord3890
ord3578
ord4657
ord2086
ord4608
ord5647
ord3837
ord4704
ord3314
ord4296
ord3922
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord4677
ord2140
ord1850
ord4691
ord2617
ord2754
ord2843
ord3945
ord2744
ord2845
ord2620
ord2696
ord2961
ord3345
ord3346
ord3340
ord2694
ord3580
ord4101
ord3906
ord3240
ord570
ord699
ord724
ord3067
ord1035
ord509
ord315
ord731
ord2007
ord2060
ord2001
ord2064
ord2008
ord3724
ord4173
ord3237
ord696
ord706
ord3656
ord762
ord486
ord2072
ord5415
ord2112
ord1752
ord3709
ord2258
ord3881
ord3120
ord548
ord2005
ord3000
ord2787
ord4089
ord4086
ord4084
ord3761
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4715
ord3579
ord4165
ord4719
ord4703
ord5053
ord4096
ord3259
ord721
ord504
ord549
ord760
ord3068
ord729
ord341
ord834
ord4714
ord292
ord873
ord371
ord3655
ord2299
ord1002
ord2514
ord3005
ord1089
ord1014
ord1021
ord622
ord5588
ord3661
ord470
ord373
ord2515
ord1739
ord2390
ord5674
ord4543
ord4093
ord1583
ord265
ord3727
ord4163
ord2675
ord2681
ord5612
ord2195
ord2224
ord4659
ord5079
ord1510
ord4934
ord2774
ord5005
ord3902
ord4407
ord4316
ord2100
ord3870
ord3007
ord2789
ord5385
ord5470
ord4097
ord3908
ord578
ord325
ord4282
ord3907
ord3134
ord5363
ord3538
ord1857
ord4087
ord1598
ord3730
ord4065
ord4521
ord4347
ord4007
ord4021
ord4019
ord4002
ord4005
ord4000
ord4416
ord4413
ord3606
ord5362
ord4656
ord3267
ord1492
ord1819
ord3913
ord2510
ord349
ord690
ord4676
ord4681
ord5424
ord4183
ord3786
ord4485
ord2359
ord3715
ord267
ord5490
ord1359
ord3831
ord5506
ord3937
ord2081
ord2200
ord3043
ord4695
ord1015
ord3583
ord1615
ord4446
ord3734
ord4546
ord1829
ord2388
ord2091
ord2676
ord4545
ord4549
ord3947
ord3790
ord2914
ord4463
ord4845
ord2962
ord2528
ord2527
ord3648
ord3577
ord4653
ord2084
ord4697
ord2324
ord1445
ord3917
ord2139
ord3909
ord363
ord600
ord4670
ord863
ord4499
ord2533
ord1592
ord4512
ord4109
ord4081
ord4179
ord4213
ord4467
ord3858
ord4311
ord4293
ord817
ord818
ord3046
ord2707
ord2776
ord701
ord3242
ord3620
ord5610
ord2317
ord5492
ord1616
ord3735
ord3378
ord1851
ord2092
ord4547
ord4550
ord3948
ord2913
ord862
ord2529
ord3649
ord2085
ord4698
ord3918
ord3910
ord3219
ord672
ord702
ord713
ord499
ord476
ord364
ord2238
ord2181
ord2304
ord2303
ord5203
ord1834
ord2876
ord5372
ord1843
ord5314
ord3659
ord1846
ord5532
ord3938
ord4671
ord5374
ord3978
ord5213
ord1742
ord5488
ord3642
ord3896
ord5071
ord5673
ord3379
ord3262
ord3762
ord4333
ord5142
ord4312
ord3859
ord4694
ord1539
ord5360
ord2199
ord4450
ord5399
ord1704
ord3074
ord2218
ord1368
msvcrt
_setmbcp
exit
__p__acmdln
_initterm
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
sprintf
sscanf
_mbscmp
_ftol
__p___argc
__p___argv
__CxxFrameHandler
strrchr
_exit
_XcptFilter
kernel32
HeapFree
GetPrivateProfileStringA
HeapAlloc
Sleep
GetVersion
GetModuleHandleA
GetStartupInfoA
GetProcessHeap
user32
GetSysColor
GetParent
PostMessageA
GetClientRect
GetSystemMetrics
ScreenToClient
FindWindowA
PeekMessageA
EnableMenuItem
GetDesktopWindow
ClientToScreen
SetRect
SetForegroundWindow
wsprintfA
SetTimer
KillTimer
UpdateWindow
EnableWindow
GetSystemMenu
LoadIconA
GetWindow
MessageBoxA
IsIconic
GetWindowRect
SendMessageA
IsZoomed
ReleaseDC
GetDC
gdi32
GetDeviceCaps
shell32
SHGetPathFromIDList
SHGetMalloc
SHBrowseForFolder
SHFileOperationA
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ