Static task
static1
Behavioral task
behavioral1
Sample
88e735d9e58ee8e7a93d616a098de02d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88e735d9e58ee8e7a93d616a098de02d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88e735d9e58ee8e7a93d616a098de02d_JaffaCakes118
-
Size
165KB
-
MD5
88e735d9e58ee8e7a93d616a098de02d
-
SHA1
0f6204f0504d40ee6b585c69ca0272873b4d0c9e
-
SHA256
5a140286ae574920a595c482f1c8842a23b53b9c0472c8aea09876d5063d5384
-
SHA512
6ddf7ff9edd4fe0a676fef63e3b7fd4d8a6ff3ef22fb4aa8d579de141029cc0c87b2e0f12f9acfe88eeba01a562a950c54ef460d76565156a1c7e65e8d11b83a
-
SSDEEP
3072:AimVmT9/MmOiruR85yEVhJRmkDS8P/X6yAi+B1CwGla+ZIhnofT1b5ZD0S:ANIMmOiSs1Q38HqyAG/52dofTVjv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88e735d9e58ee8e7a93d616a098de02d_JaffaCakes118
Files
-
88e735d9e58ee8e7a93d616a098de02d_JaffaCakes118.exe windows:4 windows x86 arch:x86
0d6283a3eef5ad603ee39afdb53aa7e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
GetModuleHandleA
GetStartupInfoA
msvcrt
_exit
_XcptFilter
free
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc
exit
_stricmp
_strrev
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ