Static task
static1
Behavioral task
behavioral1
Sample
d98c91e9aef2158aa8a1841e5240d7f2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d98c91e9aef2158aa8a1841e5240d7f2_JaffaCakes118
-
Size
700KB
-
MD5
d98c91e9aef2158aa8a1841e5240d7f2
-
SHA1
29ff1057fa19a1ef9ba1424ddd96097609739735
-
SHA256
b24528933ca547f24146058c6f962b7cd67d19832cd4e3f2ce0030fc85726061
-
SHA512
268e2585ec010c01dbb3a46e57e0dfef16bdb87b51106b2dbcfd0ff5cf858f7785f3a3c61db2f72f0bc2bb39ccb81409fcae2911296539b3509d14e96f06c036
-
SSDEEP
12288:RrwLX/buxUtJUDSmWvnqWqgbweyQRMKrX3Ja8iMm3rG3R9c09DtNbh/shrHCS8DO:R0LTuit2SmIFqteyErWHCh9cAD/b6r8q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d98c91e9aef2158aa8a1841e5240d7f2_JaffaCakes118
Files
-
d98c91e9aef2158aa8a1841e5240d7f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
9fb3b0e5b49de5baa8db6b00b7f07149
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
ord696
oleaut32
VariantChangeTypeEx
Sections
Size: 636KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE