Static task
static1
Behavioral task
behavioral1
Sample
60b8f174e3b1881cebc4d19f7a1d0d50_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
60b8f174e3b1881cebc4d19f7a1d0d50_JaffaCakes118
-
Size
392KB
-
MD5
60b8f174e3b1881cebc4d19f7a1d0d50
-
SHA1
bcfec374c8bf38868a838eafb5095932ab79850e
-
SHA256
519983803541b8837c2b964bc31d78a372a3faa021e0a09b0b4997e786e20530
-
SHA512
3c45737d618f44e3418b1e535d703e37f1852df8825e087a6094f2391d4d7ff45b44578fa966b07697a5b5608b3dbea3d67930127e9cd3fc36b886797bfcdc0e
-
SSDEEP
6144:LYyKhzkN4k4qmKcqO3+YJGYuH6MgDj82pOxyc2jtfO/F3pY1AO:kPzW9DgHJGLURd5fcY1A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60b8f174e3b1881cebc4d19f7a1d0d50_JaffaCakes118
Files
-
60b8f174e3b1881cebc4d19f7a1d0d50_JaffaCakes118.exe windows:4 windows x86 arch:x86
d84d31582a6427dd034f6f0fdfe3b19e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord600
__vbaExceptHandler
ProcCallEngine
ord648
ord100
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 384KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ