Static task
static1
Behavioral task
behavioral1
Sample
c88605576f02fd4cebc89a112a74e55e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c88605576f02fd4cebc89a112a74e55e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c88605576f02fd4cebc89a112a74e55e_JaffaCakes118
-
Size
177KB
-
MD5
c88605576f02fd4cebc89a112a74e55e
-
SHA1
7a5025c53d6180f9cf9674a466a0d63f9f132eab
-
SHA256
423e889485c6b038a91aaa5c2a579c6dd4f220960947d891549c6f40db4c5c3f
-
SHA512
33169d4c5db9be350df436956681540dafa2a0849cf1eb93f15d60e1a260e402d988729502f958ece25286d38a94993151ea519ee1329237286ace4b8c9db976
-
SSDEEP
3072:b1mW0klYxQDyLx6pHAE7tS6wX94rUwxq7Isej3FKT1RpyAn4Tug+itVJo13CUB:JFwQDgx6pgEhS14rRxEeJKhb8Fw3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c88605576f02fd4cebc89a112a74e55e_JaffaCakes118
Files
-
c88605576f02fd4cebc89a112a74e55e_JaffaCakes118.exe windows:4 windows x86 arch:x86
9932ea624e4641f4d49c2c307092d45f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileSectionA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
arn Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arn Size: 119KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arn Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arn Size: 39KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arn Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arn Size: 6KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE