Static task
static1
Behavioral task
behavioral1
Sample
310f0749e415e4c73ef8a2e78ab98cf3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
310f0749e415e4c73ef8a2e78ab98cf3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
310f0749e415e4c73ef8a2e78ab98cf3_JaffaCakes118
-
Size
16KB
-
MD5
310f0749e415e4c73ef8a2e78ab98cf3
-
SHA1
7b383d1d20725adcac960734aee5b4d9eb443d34
-
SHA256
f7a34bb27147134ff53531cfa4cada3acb543be2373b441b64a5cbab93ac1b02
-
SHA512
518ebd7ced446623368c9c51ba87978bee5219eec77bfd77370c8731b4bff5948d091ec4ef84ba8afc5bcc44c990d7261194f143360c161478cb3cedf8854c01
-
SSDEEP
96:0oNjYfweROV1kuVFmEAUisDxZoeZjSsZtrIn/DdQEqkLMK9sI:JavOV1bX5xZJVYnJQE1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310f0749e415e4c73ef8a2e78ab98cf3_JaffaCakes118
Files
-
310f0749e415e4c73ef8a2e78ab98cf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae412ed9d50f0e004aa5f90efbfe72df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100
Sections
. Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ