Static task
static1
Behavioral task
behavioral1
Sample
24212c0d5475dbb8c0d6b7b6256d8b58_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24212c0d5475dbb8c0d6b7b6256d8b58_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24212c0d5475dbb8c0d6b7b6256d8b58_JaffaCakes118
-
Size
16KB
-
MD5
24212c0d5475dbb8c0d6b7b6256d8b58
-
SHA1
e19abc496bb7facc1f48cb18a23f19f585a37618
-
SHA256
3208fb405d9e8e1be716493e55365265e2bbfc8201c1912760f447e208a4cf67
-
SHA512
cf782aae988b8cd28e70900571c611470a830c9ad4aa45622015748dae03155a853765fc1efbe1b33204371ee2b2ff46832ecbf50795e483bc430cccacda29a2
-
SSDEEP
192:KbZSlZUOVEURIPwnQptu7kF1H4EVEl9fAKDRcL+VRWUI:oSluaEUePwnG47kXYGEEK/RWUI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24212c0d5475dbb8c0d6b7b6256d8b58_JaffaCakes118
Files
-
24212c0d5475dbb8c0d6b7b6256d8b58_JaffaCakes118.exe windows:4 windows x86 arch:x86
f175a35352e5ff690e95d63c353dedb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord593
ord594
ord520
__vbaExceptHandler
ord711
ord608
ProcCallEngine
ord681
ord100
ord618
ord581
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ