Static task
static1
Behavioral task
behavioral1
Sample
257612d78f56868e86335d2274a72c53_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
257612d78f56868e86335d2274a72c53_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
257612d78f56868e86335d2274a72c53_JaffaCakes118
-
Size
12KB
-
MD5
257612d78f56868e86335d2274a72c53
-
SHA1
f1f7bcd462b373eeba85d5bcc0c782c05f8b2bb7
-
SHA256
944add028db7d3375f28d010b2e9b2b87bb72ea0d0ffc93cb67a8ce145d3299c
-
SHA512
8eb3d88045f7136ca1959a75c068b3627a46b4d77e1d2cb3b6cee27cf2737ffe6177b9a030e576d536e76891177a6fd2d377453dcc7812e04e45105c5165522f
-
SSDEEP
48:ygMavgODnk+SqLfSc54/UhElM+c0z5JIJrTuxACA9AAAyTLXNdnBaE37wwUCECbB:stW0Uh1N0z5yJ13XvM5CE/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 257612d78f56868e86335d2274a72c53_JaffaCakes118
Files
-
257612d78f56868e86335d2274a72c53_JaffaCakes118.exe windows:4 windows x86 arch:x86
68f7e341e3e6fc7fa896006321e68ff0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord666
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ProcCallEngine
ord570
ord648
ord100
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ