Static task
static1
Behavioral task
behavioral1
Sample
2789ea4f04524426f87c6ffdcad2d244_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2789ea4f04524426f87c6ffdcad2d244_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2789ea4f04524426f87c6ffdcad2d244_JaffaCakes118
-
Size
78KB
-
MD5
2789ea4f04524426f87c6ffdcad2d244
-
SHA1
22f0581979135ca06875f0d1e700d5f7fb24e831
-
SHA256
d4b69f371d88d03d3828fd3f7c908b5b547af69194d36224825e5b1d62bd3817
-
SHA512
301edb9653e107a788172cba874478f1b7796f75a068a1eeb3731c65fae817686498ac1ac93c59e2430069f8144e613278a25cf9a78e24cfb089fa613a4c9551
-
SSDEEP
1536:VErc2jc63va4ZSfUpyLMESNK6fkg4Nu0wFx2LJJjN1MB:VEoQX3y4jX5NTfZMu0AELJdW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2789ea4f04524426f87c6ffdcad2d244_JaffaCakes118
Files
-
2789ea4f04524426f87c6ffdcad2d244_JaffaCakes118.exe windows:4 windows x86 arch:x86
3f23da773aa68a2cf6453f3f669f059f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaStrI2
Sections
.text Size: 69KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE