Static task
static1
Behavioral task
behavioral1
Sample
88bf19c112f1b00a00fe9bb317974266_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
88bf19c112f1b00a00fe9bb317974266_JaffaCakes118
-
Size
174KB
-
MD5
88bf19c112f1b00a00fe9bb317974266
-
SHA1
a8351cbe66bb6a7dad3666ee40b259c9edad152e
-
SHA256
38c227bf267c4a69927b20e001b799df2c71159d65a4b66e5cb1513c79913256
-
SHA512
08bec8e3e9391799fb1ddc7c24e67e248a25b40b42a549824053f0f5d82a357e81cb62744b36898ae0890190e110ed5e91e1a62c17efa97f78cadbaef5160429
-
SSDEEP
3072:woTnHj69XALCwg5HzflLaWFlO8iI16WnAqfWr8w2C5/mF5Y084qga8BOXX9Mi:woTnHGciHzgWXvtfnip084za+OdMi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88bf19c112f1b00a00fe9bb317974266_JaffaCakes118
Files
-
88bf19c112f1b00a00fe9bb317974266_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 168KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE