Static task
static1
Behavioral task
behavioral1
Sample
f997302d268a3d44eddf6508c634cdb5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f997302d268a3d44eddf6508c634cdb5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f997302d268a3d44eddf6508c634cdb5_JaffaCakes118
-
Size
2KB
-
MD5
f997302d268a3d44eddf6508c634cdb5
-
SHA1
e3ad12f2d44eda3812ef54cd2cbae3809790b8f1
-
SHA256
7a12d43a89d9d5c5d179da2d42b0beaa6af5f46e66e92edcbe93103fd347ff3d
-
SHA512
c1a567a8b8a06d67c2a0e941fcdcb5ca3d0610af9a0ac8ebea09e9a0616597e117c44bf19b5d3fe42272a940ec0260abd4897b601c4e38d55828558eb44ca328
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f997302d268a3d44eddf6508c634cdb5_JaffaCakes118
Files
-
f997302d268a3d44eddf6508c634cdb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe9a64d11c22b83d2aebb6b8a4552914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord595
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ