Static task
static1
Behavioral task
behavioral1
Sample
3719bd16c60b80fbe48fd9a37ca3914f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3719bd16c60b80fbe48fd9a37ca3914f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3719bd16c60b80fbe48fd9a37ca3914f_JaffaCakes118
-
Size
968KB
-
MD5
3719bd16c60b80fbe48fd9a37ca3914f
-
SHA1
263c943b594f8cabf3e9de4397f4175304d4a32f
-
SHA256
336777649123b15bc6d9a41886926b18db781de39a6e8dd1c17059393bd574f5
-
SHA512
68b29b52d35471def693a75c28c97567ca954d27fb4b34bd22353d534237e57aa34b0609495b9c2c7781f3d55745cd1453d44b8ffbe4e2ca373f1b223f3db01b
-
SSDEEP
24576:okCRmYL8z9rW4zRPqaplbfzhTRHw6B+RoYUj843I41Py:okCRmK8z9rZRSIlbfRxwzohj/Py
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3719bd16c60b80fbe48fd9a37ca3914f_JaffaCakes118
Files
-
3719bd16c60b80fbe48fd9a37ca3914f_JaffaCakes118.exe windows:4 windows x86 arch:x86
994eda553403753a0eda38a5898bbe9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord581
Sections
.8888 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.8888 Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8888 Size: 952KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ