Static task
static1
Behavioral task
behavioral1
Sample
17d48717f0146d8d994f43db2bb3cbaa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17d48717f0146d8d994f43db2bb3cbaa_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
17d48717f0146d8d994f43db2bb3cbaa_JaffaCakes118
-
Size
182KB
-
MD5
17d48717f0146d8d994f43db2bb3cbaa
-
SHA1
4dc48505bbe3d42622ae551c4011db6ac3ed9744
-
SHA256
e038f866739cc35599ba0a95a2fc325cee666a44564348ec43bd594f112da158
-
SHA512
87b939e66281bc2c19d13274732fef6bdf9ecbec036acd5578c2a2c0f6530afdc586c5d0888bf81654da5f20036112ddcf1010497991960704b87bfa5bf31346
-
SSDEEP
3072:sOezWDXdFfjJ93fcwSpEDSYkKYbP5RyFUR8H3HJDNwQy8eNEOx5DC:DkErtVfyujkKyxUS8H3pDQNBC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17d48717f0146d8d994f43db2bb3cbaa_JaffaCakes118
Files
-
17d48717f0146d8d994f43db2bb3cbaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
8cc11c1dfbf2119324866dfa27bc89ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ