Static task
static1
Behavioral task
behavioral1
Sample
b88167a4585108d8f81bed4a33626301_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b88167a4585108d8f81bed4a33626301_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b88167a4585108d8f81bed4a33626301_JaffaCakes118
-
Size
39KB
-
MD5
b88167a4585108d8f81bed4a33626301
-
SHA1
116070368947ec1a4a8db739ac7794f7f51ca371
-
SHA256
796b1489abb97a5bb5f1f18c9f22fc5737569784f37b73cb872392dcd6068e5a
-
SHA512
00bece68fcb6138b2027f9de2bc157e91fb748214d1eddc933ad90d37dcf3bdbb6e007a3fda2cef8584e71bd8bd5c4278c3acb2c18733d6947bbfd5387edb1fc
-
SSDEEP
768:kB1UtjOIyO1whQA8/59COJftcv+7rwQOJ86FtaG/c:8siYw6A8heY8QOJXuQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b88167a4585108d8f81bed4a33626301_JaffaCakes118
Files
-
b88167a4585108d8f81bed4a33626301_JaffaCakes118.exe windows:4 windows x86 arch:x86
316f9661c85558da7e0cc9df6322c345
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ