Static task
static1
Behavioral task
behavioral1
Sample
b88c9113fbcb6f4aba6b3dbb0dfbeb5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b88c9113fbcb6f4aba6b3dbb0dfbeb5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b88c9113fbcb6f4aba6b3dbb0dfbeb5f_JaffaCakes118
-
Size
3.6MB
-
MD5
b88c9113fbcb6f4aba6b3dbb0dfbeb5f
-
SHA1
a0833757d629a2aca4ff1a7d7c2b2cdabacc6474
-
SHA256
39fa6d832d0f44f19e2df5aff38422b21dae0a9f2785992b3fe774c5ff4a08f4
-
SHA512
dd16ab8eb97868a184e703f847055b1b74a53282290003645c41dc2a3a9d13bd37c2d7eb9a0de8a3843ebc9d540760b61e9b128e86a9e3795da2d3a85af42f02
-
SSDEEP
98304:ebdhb9GkHlq6yXvOJeuxzbAaFMgZRRIN7xtlKJI:ebdhbkcq6SOHvbJRRSP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b88c9113fbcb6f4aba6b3dbb0dfbeb5f_JaffaCakes118
Files
-
b88c9113fbcb6f4aba6b3dbb0dfbeb5f_JaffaCakes118.exe windows:5 windows x86 arch:x86
ed07fd93bb97b8b33f0b3d46119f183e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalHandle
lstrlenW
InterlockedFlushSList
GetProcAddress
OpenProcess
GetModuleHandleA
QueryMemoryResourceNotification
EnumDateFormatsW
GetCurrentThreadId
GetCurrentProcessId
LockFile
CreateFileA
ntdll
RtlAddVectoredExceptionHandler
RtlRemoveVectoredExceptionHandler
Sections
O Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
O Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
O Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
O Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
68o Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
uUO Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2dI Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sNO Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AIP Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5oP Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ