Static task
static1
Behavioral task
behavioral1
Sample
88bd8742b7c5fdf7a0117b4ad3e44249_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
88bd8742b7c5fdf7a0117b4ad3e44249_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88bd8742b7c5fdf7a0117b4ad3e44249_JaffaCakes118
-
Size
416KB
-
MD5
88bd8742b7c5fdf7a0117b4ad3e44249
-
SHA1
49d252e3783449d094ee3ad395ab412f45f82d1c
-
SHA256
10a80ead43b3f0bc2e379580047cf0631b299b206c7242fa01b5e8f6f81f162d
-
SHA512
1043e58a478b58e3add45bf8b9426e71e9123077d96e6119b72bc892a9a62728e38fd9106ec26728a3641235807a937e6468979bbc9bb8ef20d1630b857f5f88
-
SSDEEP
6144:YB0FiTOnmhOu6a7NxNB+HSBtH5prcE1szR/t1GxnnFa88WC4qONmRMFD:ETKm3VxC2tLrrCRl4xN8DoFD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88bd8742b7c5fdf7a0117b4ad3e44249_JaffaCakes118
Files
-
88bd8742b7c5fdf7a0117b4ad3e44249_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 359KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE