Static task
static1
Behavioral task
behavioral1
Sample
660f32df601d1da884d2986b5d47d131_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
660f32df601d1da884d2986b5d47d131_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
660f32df601d1da884d2986b5d47d131_JaffaCakes118
-
Size
97KB
-
MD5
660f32df601d1da884d2986b5d47d131
-
SHA1
0b2e0fe903e540d8f144903a42983956c8cfa454
-
SHA256
71382531b8e4a7bd3ab4e9debf6fbeed39fa3c042f1bae3bb1ea705c615c76b3
-
SHA512
163bd1810bb5e574fedabb806f6ca2efc73c9e4561ec81a5c62ec4a3c53feb8fd82831f92b0d135b8dba84d6e5e9c401468704b169c5f9faead4268bace5e600
-
SSDEEP
1536:hkxOLazYGQtuUwyYQCauU9bZWu680T3TsKAqi7YTPo1YABfKvF:oxU1sU4qbT680T34KANYTo5KvF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 660f32df601d1da884d2986b5d47d131_JaffaCakes118
Files
-
660f32df601d1da884d2986b5d47d131_JaffaCakes118.exe windows:4 windows x86 arch:x86
531382f810b9ee66d877092fcf8151bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 420KB - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ