Static task
static1
Behavioral task
behavioral1
Sample
4a5b3bc0c60f48c243a20f029cb662ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a5b3bc0c60f48c243a20f029cb662ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a5b3bc0c60f48c243a20f029cb662ce_JaffaCakes118
-
Size
28KB
-
MD5
4a5b3bc0c60f48c243a20f029cb662ce
-
SHA1
12e08a4551c79eef08a8f9e773013b38e74fcb10
-
SHA256
7a7599835e30c598ce590e4e26406816308e2605c31f6a683824866bfe29669e
-
SHA512
7c55aa66112ef4f892b8d4340ff73279b81267d6cc4b6135c2b2fe846a36ff4012d29e9dd24dcc8570596a814da85e1d64f13cdac0b298b18576e770b2d8d180
-
SSDEEP
96:tCqsQfEq7DeMBkBSkIproqsnlWcj/iCc9qGC1c0MprzlC1:v+eDeHSXrK1cHC1c3z+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a5b3bc0c60f48c243a20f029cb662ce_JaffaCakes118
Files
-
4a5b3bc0c60f48c243a20f029cb662ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
02c88f673a50eaa75923ba65b6fffb07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
DllFunctionCall
rtcFileLen
rtcSpaceVar
rtcSplit
rtcStrConvVar2
rtcAnsiValueBstr
rtcMidCharBstr
VarPtr
__vbaExceptHandler
ProcCallEngine
ThunRTMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eee Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eee Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE