Static task
static1
Behavioral task
behavioral1
Sample
690c19a17e551a17177092632c6b0415_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
690c19a17e551a17177092632c6b0415_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
690c19a17e551a17177092632c6b0415_JaffaCakes118
-
Size
82KB
-
MD5
690c19a17e551a17177092632c6b0415
-
SHA1
2d048a3ebff84bc0e2c8e1ecd3d7e90005145c5b
-
SHA256
f921af243dc83d263ffad086e835a2eb9852c1afc64c8604dc6f04c3c6cad421
-
SHA512
b6d51f6ce9c90e20b3947b2de9083a91907c1e7de66d20af4b1ffbe2950bd0fea5ec438a2e3a9c83e98e47b2a74d4a6c61df42b9a6983c2b5cb41cd791a9acf4
-
SSDEEP
1536:OyC3TTpFxSTSjNL0u2pD9n0+knNTKjPVuwP14Qmg5Tf9u8N4:2JFxS2jNb2J9n0PN+xutgZfYO4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 690c19a17e551a17177092632c6b0415_JaffaCakes118
Files
-
690c19a17e551a17177092632c6b0415_JaffaCakes118.exe windows:4 windows x86 arch:x86
f8c816ca015f99e0974299b392d8c0a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
__vbaNextEachAry
Sections
pec1 Size: 51KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE