Static task
static1
Behavioral task
behavioral1
Sample
2ced10b4158fd15ce6d36e2b5e527ad1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ced10b4158fd15ce6d36e2b5e527ad1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ced10b4158fd15ce6d36e2b5e527ad1_JaffaCakes118
-
Size
20KB
-
MD5
2ced10b4158fd15ce6d36e2b5e527ad1
-
SHA1
346d3f152fc7551d9d5ff2019b8dacd10fb8ad61
-
SHA256
580987c3f73d0d3b6c351f80955d90baff4c720066eb265b71280ba134e46b76
-
SHA512
815e3002c57806f318361f68233cd7617189c1bd4c3c20090d058df3bf6109b7badec3f9d1622978c70a280297b331752a52f68c2686212ef0acd41ed53400d8
-
SSDEEP
192:a4jMFSVxSLWlU0Dhf/JuR9+6/7KDTSN+JF7P:GFSVxSLWWe/83nzKPSYD7P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ced10b4158fd15ce6d36e2b5e527ad1_JaffaCakes118
Files
-
2ced10b4158fd15ce6d36e2b5e527ad1_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f7895562b650b2e34c243e4f67dedf9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord665
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord570
ord648
ord576
ord578
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ