Static task
static1
Behavioral task
behavioral1
Sample
4b88e9136f6a60306709d84cf681e112_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b88e9136f6a60306709d84cf681e112_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b88e9136f6a60306709d84cf681e112_JaffaCakes118
-
Size
12KB
-
MD5
4b88e9136f6a60306709d84cf681e112
-
SHA1
d2fc80d3bfd669bda15fb183e32bdcf35b6927f9
-
SHA256
d3e7e098d9b6132c27a6ad0521659fb35c183e76a4407f52a3b55c5836d8444b
-
SHA512
62ae0215b0c3e227fc74e4534191f2801bba89e4aea2e8626d2e75e1e23c58d99d22f45c006cc3fa506719f550a05b998f252a1ac4145bbbbcc8873330681898
-
SSDEEP
24:etGShHoHaOse31Sd+YknL9WLS92NISV4JdXFf0:6dCZx31Sd+bLkLSMuS2dXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b88e9136f6a60306709d84cf681e112_JaffaCakes118
Files
-
4b88e9136f6a60306709d84cf681e112_JaffaCakes118.exe windows:4 windows x86 arch:x86
ce6a8d4888d1ffdb674eb905f997ab60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ