Static task
static1
Behavioral task
behavioral1
Sample
2353bf9b822adafe77605dbed54a473f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2353bf9b822adafe77605dbed54a473f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2353bf9b822adafe77605dbed54a473f_JaffaCakes118
-
Size
28KB
-
MD5
2353bf9b822adafe77605dbed54a473f
-
SHA1
b3114af52982f98bc1beb469c09a659c2a3511ee
-
SHA256
c88b7fc99a85524097b270d6c051759683c789998417265dc720245a8e0e79e2
-
SHA512
647ec7250181f7cfe40383b7f95979a063aa15a73fbb31af094feeee776fc732f2ffa65d03d53d7cbc9adcc74544cec3f1b2fe00dfd246c69a4ab1191ee70a5d
-
SSDEEP
192:THoBxh+E3inA5HIUaCCVOSLLLLLLLLLLLLLLLLLLLeWOd2usvc3ZJhIAU8dMdWL8:z6h+vA5HIUruI2us0JJ79pRxmYYK2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2353bf9b822adafe77605dbed54a473f_JaffaCakes118
Files
-
2353bf9b822adafe77605dbed54a473f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8fdba4957866d620fab0dbc55ed61c8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord665
ord667
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ