Static task
static1
Behavioral task
behavioral1
Sample
71558682b9f0918c3cbf55bc67428216_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71558682b9f0918c3cbf55bc67428216_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71558682b9f0918c3cbf55bc67428216_JaffaCakes118
-
Size
68KB
-
MD5
71558682b9f0918c3cbf55bc67428216
-
SHA1
b8ac5b82a3e3d3c687603d8a8cadd4c92801c36e
-
SHA256
4239f71d9bb69dd2392eb8b98864b66ff710cd1506dce00a81ab13c2e8e34b9b
-
SHA512
927de0d3b6d6c994cf3f35e6821ff8ae79b5de82831491eaae9dc4d45718cbcba9dd5082e0190a9c7a68c09e5465367bbc034e361f67e95afae23899dcbb20bc
-
SSDEEP
768:V0kJchnndZQefxpeMwd1Jg5YRwWLBPJpXSKgLBPJpXj:mkJc1ndZQefYlg5KwWVBpXSKgVBpXj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71558682b9f0918c3cbf55bc67428216_JaffaCakes118
Files
-
71558682b9f0918c3cbf55bc67428216_JaffaCakes118.exe windows:4 windows x86 arch:x86
870683beaa1f2788ea52b7a2be3bb39e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord598
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ