Static task
static1
Behavioral task
behavioral1
Sample
2eb07cdef3bce72d16a58a8b9c2f1b8c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2eb07cdef3bce72d16a58a8b9c2f1b8c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2eb07cdef3bce72d16a58a8b9c2f1b8c_JaffaCakes118
-
Size
39KB
-
MD5
2eb07cdef3bce72d16a58a8b9c2f1b8c
-
SHA1
d0e033f334c28b097f76d80cbc8f6e653759aafc
-
SHA256
dce7f7ce96d828fb7d0cdc855fe357de66376715c0b404d469dd1a3159d5193d
-
SHA512
5fffcacb76763255ede0bd6d31be006785b4c381df86d976e0a44ea806fd625437ad4b73fecf2d98aed05c166221845904924457e6bf43d0a6968ee94133eb4e
-
SSDEEP
192:YiNBxzYGSY9puUym885tNBQ0efMemfiLNrak1h30K0zSqV7sVCQy+2/i:YoTYGTjuBa2DfMPkAkXENAQQy+wi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb07cdef3bce72d16a58a8b9c2f1b8c_JaffaCakes118
Files
-
2eb07cdef3bce72d16a58a8b9c2f1b8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b0c8e9fc721d0cf3a17360ae83d7925
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
. Size: 10.6MB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ