Static task
static1
Behavioral task
behavioral1
Sample
ff3ff4f3eddd36fb489fa36be3c28b97_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff3ff4f3eddd36fb489fa36be3c28b97_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff3ff4f3eddd36fb489fa36be3c28b97_JaffaCakes118
-
Size
242KB
-
MD5
ff3ff4f3eddd36fb489fa36be3c28b97
-
SHA1
4a9d821f1f7178d16af52e7db9ef08527581e675
-
SHA256
36eb69294a2cff9460735e9f799938085abd4eb6f208fb506f162f44dc8cc0e6
-
SHA512
ed550bfb06c3e9964a8df2779cfe6a853e0be5ca653af2ac30f5b0a81b3b03606c1a39f37b6bd7d38fbf6c45c040c7aebde738b08e075802d6eea270a1cfce5d
-
SSDEEP
6144:SltdEea8Lddf/K8Lr5XI37rDTKI00bPeLIM0:CWCL3yqr5XI37rSLEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff3ff4f3eddd36fb489fa36be3c28b97_JaffaCakes118
Files
-
ff3ff4f3eddd36fb489fa36be3c28b97_JaffaCakes118.exe windows:4 windows x86 arch:x86
d69c6479660f6fc7022a75a7d35f4ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaVarSub
Sections
.text Size: 224KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE