Static task
static1
Behavioral task
behavioral1
Sample
298149397b63a9a5d4af3a8197fd9d7d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
298149397b63a9a5d4af3a8197fd9d7d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
298149397b63a9a5d4af3a8197fd9d7d_JaffaCakes118
-
Size
23KB
-
MD5
298149397b63a9a5d4af3a8197fd9d7d
-
SHA1
89497db9c170948dfd7845f6c6dfc32e40202afc
-
SHA256
7cd9d3b5a8a65aab75b83fac5110dde76c002cd048ad1ded010786cfad2d8bb6
-
SHA512
241fe5e02b728bb30e114a98669b11050cb0af7e27bc15d185d61236692e02d3596694c37141f0818f91d0bd8fad27e84369abecbb36a0009e09c317215aa720
-
SSDEEP
384:GBdSJ9pcpJrDjYBP9omp9pOSLEWJIU/o3SxPXXxHfpm2RGst+xeH1a:D8UBP9omxOSPJIU/SUvXxxPUm+xeH1a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 298149397b63a9a5d4af3a8197fd9d7d_JaffaCakes118
Files
-
298149397b63a9a5d4af3a8197fd9d7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 18KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 240B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ