Static task
static1
Behavioral task
behavioral1
Sample
71b2ec9fcff95490afb7710590f3b77f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71b2ec9fcff95490afb7710590f3b77f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71b2ec9fcff95490afb7710590f3b77f_JaffaCakes118
-
Size
16KB
-
MD5
71b2ec9fcff95490afb7710590f3b77f
-
SHA1
2011b53f66baee506d3c72067fa9107cbd19566a
-
SHA256
5b5213babd7c21857f56bb6ca406808b73553a2a3efbd851e6c7d45de367452d
-
SHA512
7501c53cb054f445aae7b7d9464404badcbdb067098dfe7fe739f65174e6a69f2ad6bba4f6e0fe3c035dc920726f4874b5ed7dc885d6c379468966c1f94f9e01
-
SSDEEP
96:DOrbgzvyyuRuSulZx+sNEhFHnBNEODSpuBfrtwjKwHeZ7LC5zRTgASmTf2:DCbgzv+hFHnB/muTiJ+Zk11Tf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71b2ec9fcff95490afb7710590f3b77f_JaffaCakes118
Files
-
71b2ec9fcff95490afb7710590f3b77f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c44f3e5e23ace3ccd00d4301e78f3a49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord667
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord537
ord100
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ