Static task
static1
Behavioral task
behavioral1
Sample
88c9f4f19ce97e3af829344f434a247a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88c9f4f19ce97e3af829344f434a247a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88c9f4f19ce97e3af829344f434a247a_JaffaCakes118
-
Size
33KB
-
MD5
88c9f4f19ce97e3af829344f434a247a
-
SHA1
d3f7301852dd614a37075c038e075eafd6f146b4
-
SHA256
32e872ffce90afbd95564ba66f23bf10bc57d9126c8dce4f736e954193587baa
-
SHA512
0eb24e541f61a5d8d4001fa01b9494ddb04ea10ddb2a5c977ae6ebc04142a04279ba3cd2af6d03a5e6d445d28c0614ec5c12944c7ff5fbef4364c32746e3e464
-
SSDEEP
768:N254bhCbCY3ukQOBTcEXME2LxNjQL/Q2+613UFT:7bslukQOBTXMBNjQLsFT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88c9f4f19ce97e3af829344f434a247a_JaffaCakes118
Files
-
88c9f4f19ce97e3af829344f434a247a_JaffaCakes118.exe windows:1 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 25KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 349B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE