Behavioral task
behavioral1
Sample
3518f16ec9609a86b38aea5bf82f2210_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3518f16ec9609a86b38aea5bf82f2210_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3518f16ec9609a86b38aea5bf82f2210_JaffaCakes118
-
Size
16KB
-
MD5
3518f16ec9609a86b38aea5bf82f2210
-
SHA1
dbe8a70259f79d35985dc70d2f337bc0bebb44d2
-
SHA256
ce8515de20ee8fda4a93068cbd70152efe71d0c76933b274a9423ac5819eb032
-
SHA512
e5852fb2e1eadcd9eb45171a7fa78db4b7268b144d7ecdf86e0d4a98640664afeba5789f133613a49efd3291ead63a55797956e5edd3c0d9995d5cd59dead5a9
-
SSDEEP
48:ygyKtXqZUAuM0kQgQlKCGQVRBXkh6jXreBpqc7lqnDwBZnDjkUw3805tWwaQNBGH:S76AuuQtLTResrres8VDjkYONs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3518f16ec9609a86b38aea5bf82f2210_JaffaCakes118
Files
-
3518f16ec9609a86b38aea5bf82f2210_JaffaCakes118.exe windows:4 windows x86 arch:x86
612698e0e9e762e48c91f28f721745e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaExceptHandler
ProcCallEngine
Sections
UPX0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE