Static task
static1
Behavioral task
behavioral1
Sample
03d1e3ad3ced8d8a27eb66ce5f1314a2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03d1e3ad3ced8d8a27eb66ce5f1314a2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
03d1e3ad3ced8d8a27eb66ce5f1314a2_JaffaCakes118
-
Size
16KB
-
MD5
03d1e3ad3ced8d8a27eb66ce5f1314a2
-
SHA1
32d1055d64008478aefabb9e0b082774ff1894aa
-
SHA256
a0ce22a73149fd5d9f0d70d1055490c6afab2b6e4af3d6941fd2643343d6709b
-
SHA512
d7bc54c2c44325b5f9efcb4132fb77ce8da3801a22f5f6986b3d2d6a3ce638f9615e9fd6d52c1518888956a76730e11e3991dc412c08c6bf30dde64247d24be9
-
SSDEEP
96:X1fN3XhfdAgmWlwPYv5KCTW5IwnVq6TZjssD6dcRgPZgBva96FEPPCfzwpo1EE2:7vHwPdjIwnsAZMP6Fa96q3CfzTEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03d1e3ad3ced8d8a27eb66ce5f1314a2_JaffaCakes118
Files
-
03d1e3ad3ced8d8a27eb66ce5f1314a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
dd54d2e5c9dd7fa58fe55ea234652137
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ