Static task
static1
Behavioral task
behavioral1
Sample
f7e0ba577fdf5e475c1586dcf11a0985_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7e0ba577fdf5e475c1586dcf11a0985_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7e0ba577fdf5e475c1586dcf11a0985_JaffaCakes118
-
Size
197KB
-
MD5
f7e0ba577fdf5e475c1586dcf11a0985
-
SHA1
1f8cac5608d7f02886a112e67144fd7b0b2a9761
-
SHA256
069af7387379fdf04e6ace2dcce85e0a06b621a64e6ee87a7810a596da35b9ac
-
SHA512
82f84484563172cc3470223f7a815db074e65968ba4554eca38fe1edf73d3242e50e81820ee091c297ba8e1ca413f231e7e3d7ff411967c2058e91bd449565f6
-
SSDEEP
6144:JckNaWI6ejqySroyCNxL/TdmhzYta6IiN:JcGbI66qyJHLxmhzY06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7e0ba577fdf5e475c1586dcf11a0985_JaffaCakes118
Files
-
f7e0ba577fdf5e475c1586dcf11a0985_JaffaCakes118.exe windows:4 windows x86 arch:x86
d69c6479660f6fc7022a75a7d35f4ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaVarSub
Sections
.text Size: 169KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE