Static task
static1
Behavioral task
behavioral1
Sample
88fe18ab4649a2faa2509559ede6ee7c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
88fe18ab4649a2faa2509559ede6ee7c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88fe18ab4649a2faa2509559ede6ee7c_JaffaCakes118
-
Size
43KB
-
MD5
88fe18ab4649a2faa2509559ede6ee7c
-
SHA1
2e499b30fac33a12a537d2194e09c021f64c5079
-
SHA256
d348bd7dd81ebfefbc3bc9caa6b0af3894b0ef5b64747e0abdcb2a07901f50a7
-
SHA512
dcb38519128236346bd3c1abad7dc4813d43ac1cb130a2439e0cdab647dd91b1ad4f82183a2ee1c3aa04a7be1945b48a541c788c31d322056053448ca54161b3
-
SSDEEP
768:9ks5z9INeCTkJyawHKU+1nGH5U2HX+HiH5hH0XBm/nl+RIQI:2s5ZqgJyaN1nGU23+C8mKID
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88fe18ab4649a2faa2509559ede6ee7c_JaffaCakes118
Files
-
88fe18ab4649a2faa2509559ede6ee7c_JaffaCakes118.exe windows:5 windows x86 arch:x86
565de1873cfbecf2e97de1d7df68fe87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
UnmapViewOfFile
ReleaseMutex
lstrcmpiA
GetCurrentThread
HeapAlloc
SetFileTime
ExpandEnvironmentStringsW
lstrcpynW
CreateFileMappingW
GetUserDefaultUILanguage
CreateEventW
FlushFileBuffers
CopyFileW
GetTempPathW
CreateThread
FindFirstFileW
WriteFile
GetModuleHandleA
FindClose
GetSystemTimeAsFileTime
GetTimeZoneInformation
lstrcatW
SetEvent
MoveFileExW
HeapFree
SetLastError
DisconnectNamedPipe
MultiByteToWideChar
lstrlenA
GetSystemTime
user32
GetDlgItem
ExitWindowsEx
GetForegroundWindow
CharLowerBuffA
GetClassNameW
GetIconInfo
Sections
.jgrev Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hszat Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pixgj Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ