Static task
static1
Behavioral task
behavioral1
Sample
155d6e5a69e85cdb788f97db02d84394_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
155d6e5a69e85cdb788f97db02d84394_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
155d6e5a69e85cdb788f97db02d84394_JaffaCakes118
-
Size
292KB
-
MD5
155d6e5a69e85cdb788f97db02d84394
-
SHA1
4ed574831340fa9cec022f1fe786308c8c0fd0a6
-
SHA256
a29e9a9bec12f8c3aab8c02ad68b7671cbdfb4197d274a2f1764be7a521c55e2
-
SHA512
2e449430681195624a73452dacc5c9a1aad7572c4fc4138ef6f227c42b39fc9a4d53adb1fb9502fb1d47ca76622e0e56f08ed19003eac8f17b997c0a7b5a1370
-
SSDEEP
6144:7e4V/7Zko6Yl7un9PycD13VUUSAdeKm7qKI+iT6/+3Kh:C4VlkbYl09qcDHhd5+qeiT62c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155d6e5a69e85cdb788f97db02d84394_JaffaCakes118
Files
-
155d6e5a69e85cdb788f97db02d84394_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca647a3977795872f36236c40ef017da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ