Static task
static1
Behavioral task
behavioral1
Sample
4b4758dff7c4ff982d4aa0931bd84de0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b4758dff7c4ff982d4aa0931bd84de0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b4758dff7c4ff982d4aa0931bd84de0_JaffaCakes118
-
Size
20KB
-
MD5
4b4758dff7c4ff982d4aa0931bd84de0
-
SHA1
4132eee104693b2cf02524f649cd5bd36c245bff
-
SHA256
8470f5e74cf52f44aaa1b15c756d3df5c728c3a4e3b2deddc077a643659e8bab
-
SHA512
c276489f2fbe04395d2a82d0943b8d8583c7ec1f621044c370754e9f16809999ee7641aeee43e8d2be4b9e0817ab825a2a1453f2f8e31705f3c9ae8fc2b7b94d
-
SSDEEP
96:k+Sn+okPti5vFMfL0rPYK10ubNBq7c3pLl7if9ELRBi/e:2n+nPti5vFMXKiQBic3pLlGfCbSe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b4758dff7c4ff982d4aa0931bd84de0_JaffaCakes118
Files
-
4b4758dff7c4ff982d4aa0931bd84de0_JaffaCakes118.exe windows:4 windows x86 arch:x86
716014ef9025785b9aba53b6353383f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord621
ord516
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord717
ProcCallEngine
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ