Static task
static1
Behavioral task
behavioral1
Sample
5fd56e4952296e53fe0de278c6e2b105_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5fd56e4952296e53fe0de278c6e2b105_JaffaCakes118
-
Size
288KB
-
MD5
5fd56e4952296e53fe0de278c6e2b105
-
SHA1
c7830b645c262a4e2cffb651f408c3460bb50bec
-
SHA256
89c8b7f879bd3c1f48b7287bfd74e173c5009114e3397d242fbe9c1245c65024
-
SHA512
105e020787ed8c68399ec0158731d559ad185c842c4f24d6e1d25d93905bd825f9fa8c49668af918f26ba8bea9b60f2a1f827b750b981656749717077160ccb4
-
SSDEEP
3072:7LPs69RMQf+B6fSyHWsB50vOgLnE6G6QwndyDQsCtu72BWbWLqFwRGWlGuoj7eev:7A6gQWzWyWMpVjyNwlGHjF41kgwpLAI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fd56e4952296e53fe0de278c6e2b105_JaffaCakes118
Files
-
5fd56e4952296e53fe0de278c6e2b105_JaffaCakes118.exe windows:4 windows x86 arch:x86
01fec8e8dac2dc6982952e30d435a074
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord595
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ