Static task
static1
Behavioral task
behavioral1
Sample
66277713523337a4803060671ad5fe90_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66277713523337a4803060671ad5fe90_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66277713523337a4803060671ad5fe90_JaffaCakes118
-
Size
440KB
-
MD5
66277713523337a4803060671ad5fe90
-
SHA1
453cc131f9dce5128457a60720f720e1050084c1
-
SHA256
7a92917183213d4cbd9e35595c88410f8d7f37858b0e93b52f36c514b7236f77
-
SHA512
8a68f5628a3f8b8b57d5c62a6f059a5996bfd48f2c385085eb78a3fe42a0c246d1bceff23331d5c2808911ec96139aa81eee35236106b91f6b8d8164633de86d
-
SSDEEP
12288:cG6+isHNHSycka9qwnQr2GnlWj5F0mTCWhe:cd+iEtO9nQrfnw0mPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66277713523337a4803060671ad5fe90_JaffaCakes118
Files
-
66277713523337a4803060671ad5fe90_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e79fb82bd208593392d3f4ac00c1a77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616
ord617
ord581
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ