Static task
static1
Behavioral task
behavioral1
Sample
940dd1fb3cc8f15e4d73fb86721938c5_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
940dd1fb3cc8f15e4d73fb86721938c5_JaffaCakes118
-
Size
529KB
-
MD5
940dd1fb3cc8f15e4d73fb86721938c5
-
SHA1
331a86278ba71274996a40d49f7e90ee8428a754
-
SHA256
4942925b725fba4b9a37ad767d5fdd92f5096da2a5b95656077e0367f8084521
-
SHA512
82f27c2d971651decf41d4d5a369e0da4540524fc9b32c402e70e61670124abb111bbc1e5ea666b706587dd2857e139311d0de04322d9b0d62a0e0b317876c3b
-
SSDEEP
12288:JsEhZ9nSUhxEmwj+FTD0AmiHIHfcej7MftD1Z3f:N93hxzwaZ1mwIHTj7QB1Zv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 940dd1fb3cc8f15e4d73fb86721938c5_JaffaCakes118
Files
-
940dd1fb3cc8f15e4d73fb86721938c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
7bcb4be8a284e4ec65e8f7af4ff9f3bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord696
Sections
.MPRESS1 Size: 519KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE