Static task
static1
Behavioral task
behavioral1
Sample
5de91a8543d0c395f059c1c0921f839f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5de91a8543d0c395f059c1c0921f839f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5de91a8543d0c395f059c1c0921f839f_JaffaCakes118
-
Size
44KB
-
MD5
5de91a8543d0c395f059c1c0921f839f
-
SHA1
d9ab0b4bb81d5aef8de52a98b185eb3d33eb99ab
-
SHA256
b0147ef9bbd52a9633594cf4252d7c45fbb791c1c36bc0e0e5d0165d17a800bf
-
SHA512
b2f97f1806b2db0f384a1565e737ef17a24a4ac7443c0f347cedf6a33f54ed732df457ad0296fe29317b4e454f06eecfb47299dbb21f5867af531473cd9a6755
-
SSDEEP
384:2QI9KVSrObIUE/zCIlkwdhyrXTnovTSppNwT+kV/EZHiuRND5IZDyGP9Mnv:2Qq6XE/+VjTnumpNGVcZHhR7YDySov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5de91a8543d0c395f059c1c0921f839f_JaffaCakes118
Files
-
5de91a8543d0c395f059c1c0921f839f_JaffaCakes118.exe windows:4 windows x86 arch:x86
6509d7cc19f6ff05a41a31ec94355b05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord518
ord666
ord595
ord525
ord526
ord528
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord576
ord100
ord616
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ