Static task
static1
Behavioral task
behavioral1
Sample
88f34bacb156f6183b13fa98acb30184_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88f34bacb156f6183b13fa98acb30184_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88f34bacb156f6183b13fa98acb30184_JaffaCakes118
-
Size
206KB
-
MD5
88f34bacb156f6183b13fa98acb30184
-
SHA1
4b9ee9f8b467767fe164a47520eb3900bed7c2c8
-
SHA256
5f79be6abb32236f3f4df353f8ed29f8b0a3e8629d8c38e3dbd85c0a809b1fd5
-
SHA512
931b456225a937984bd88c551fb6be4e49e2b2ce7a916e71a9a87106146a667d0cbee2ecac16f1879becae161a4f4d200a6f794d2cff29fff8e69e761de3aa0f
-
SSDEEP
3072:kpsDrUP6rBkMfIXezdJH7e7TCPFI01l0TY+GoYSdLILYVE:kpoAClfIOPbemP95+99eLYO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88f34bacb156f6183b13fa98acb30184_JaffaCakes118
Files
-
88f34bacb156f6183b13fa98acb30184_JaffaCakes118.exe windows:1 windows x86 arch:x86
ec0fe9c21c54bd4f890eba9683413bc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
ResetEvent
GetFileType
GetModuleHandleA
GetStdHandle
lstrcpyA
GlobalAddAtomW
GetTimeFormatA
ExpandEnvironmentStringsA
EnterCriticalSection
GetProcessWorkingSetSize
RaiseException
GetCommandLineW
Module32First
QueryPerformanceFrequency
GetStartupInfoA
gdi32
CreateCompatibleDC
SetMapMode
StartPage
SelectObject
SaveDC
GetTextExtentPoint32A
SetTextAlign
Rectangle
CreatePen
CreateCompatibleBitmap
CreateSolidBrush
ExtTextOutA
StartDocA
GetBkMode
user32
IntersectRect
LoadStringA
RegisterClassA
GetPropA
GetUserObjectSecurity
WindowFromPoint
GetWindow
ChildWindowFromPoint
LoadMenuA
msvcrt
_XcptFilter
_ecvt
_initterm
_adjust_fdiv
_acmdln
__setusermatherr
_ismbckata
__p__fmode
isdigit
putchar
_c_exit
_wfsopen
_mbscspn
__p__commode
system
calloc
exit
_mbctolower
_controlfp
_wtoi64
_wsearchenv
__getmainargs
memcpy
_except_handler3
_exit
isprint
__set_app_type
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ