Static task
static1
Behavioral task
behavioral1
Sample
14e37fbc16c87f9d2879798844904719_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14e37fbc16c87f9d2879798844904719_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14e37fbc16c87f9d2879798844904719_JaffaCakes118
-
Size
165KB
-
MD5
14e37fbc16c87f9d2879798844904719
-
SHA1
89f92ab5c2f09943247d91eddcf0656641cb72c6
-
SHA256
f1659b13c0636fb76ac033dafb03eaeac2ccc822bb9cebbd18d3191ad4150413
-
SHA512
36bc764d2e37dff2f5ffddc5135714b2b2c61ff1a7287486e312fd3146e938bac2a2190a3059bff04151f7a3cf7f4a48d21c0d1a6d48744759b3c46f05aa24ad
-
SSDEEP
3072:hfbfXx99ZJyWExjUH/0YbKzEQH6QYkdgDyca+cR+qKqyuHQ/J4ZiHOIfq8g7Wlwy:hfbPDvgHYbKYtTkdgGca+cRgqhHQ/GZm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e37fbc16c87f9d2879798844904719_JaffaCakes118
Files
-
14e37fbc16c87f9d2879798844904719_JaffaCakes118.exe windows:4 windows x86 arch:x86
19e5edbb740bddc467927e10d46bf0b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
msvbvm60
__vbaVarTstGt
Sections
.text Size: 20KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE