Static task
static1
Behavioral task
behavioral1
Sample
31887aa8dc705737eed9e9cb39a875e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31887aa8dc705737eed9e9cb39a875e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31887aa8dc705737eed9e9cb39a875e7_JaffaCakes118
-
Size
205KB
-
MD5
31887aa8dc705737eed9e9cb39a875e7
-
SHA1
4367c6b65047dbb3e4a61ae46b454e7cceffa5f4
-
SHA256
548accf812771907d9d4477febdcb51ca5d2040eb825d6870150a0edd8dcd3aa
-
SHA512
3af32d3c4e08381579a6f38ff3eae1cffb4122e920bd868090c5540782079e82e52be259de9f8b60d580b0a8ec03aa70a23fe156cf0c56726a34141cc66ad1a9
-
SSDEEP
3072:U6FyIBjZZAVtXcCB+ddE5NwNrD0B6rwAO/1rGdayxj/jITaIP6UdGUxQ:UEdDZAVtXcCB+HDgUwAOy3DjITaIPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31887aa8dc705737eed9e9cb39a875e7_JaffaCakes118
Files
-
31887aa8dc705737eed9e9cb39a875e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
c469504d7b2aa8b191c33897b1106d23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ