Static task
static1
Behavioral task
behavioral1
Sample
31b903f783de59197cb68c7270bce4a3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31b903f783de59197cb68c7270bce4a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31b903f783de59197cb68c7270bce4a3_JaffaCakes118
-
Size
25KB
-
MD5
31b903f783de59197cb68c7270bce4a3
-
SHA1
40dfc80fc3c55af3e30f1c8ba87393ac8d49c9b4
-
SHA256
064ffcb2872ac66a31592f65c12abe52d1b83e4fdd5a1559798d200a642d28ce
-
SHA512
9d87a1e09e82fa608c8f2b43d752a5d65404ec2bb4330c67b3de337eadddc51fd5a5c4e8ca91794e36c2e95532574733ea71f561397247bd18fd039a2841c423
-
SSDEEP
384:ltgyJK4zwnZDAkaoLNejESwtqDpVmEvjMkw4aXNG4C7PmjR:9DuDAngYESwtq1EQjTsdGx7mV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31b903f783de59197cb68c7270bce4a3_JaffaCakes118
Files
-
31b903f783de59197cb68c7270bce4a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
c5206acfd13c9dc4f947c130ba5c10a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ