Static task
static1
Behavioral task
behavioral1
Sample
7680e9eb34ce670a4e5385173c91f7c8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7680e9eb34ce670a4e5385173c91f7c8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
7680e9eb34ce670a4e5385173c91f7c8_JaffaCakes118
-
Size
176KB
-
MD5
7680e9eb34ce670a4e5385173c91f7c8
-
SHA1
828d77c5c9e9772f8bbd1f30a0f032e3a00146af
-
SHA256
28a2e573720ea599ae1b7553e51cbbfba7be109968a8a9a9b957fce3d669f0c0
-
SHA512
bc5236f6715dcb7e35a58e039c8d3bd309d4cfa8c523889e61fb0846679c7c21af6b2eaa482c7cca72596cb316e50202b7b9b5c0878fca195e7d71f28dee9316
-
SSDEEP
3072:U7QF53L2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q5:xLHq0Z8k92iBSPoV+gRh8celb++0vvO1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7680e9eb34ce670a4e5385173c91f7c8_JaffaCakes118
Files
-
7680e9eb34ce670a4e5385173c91f7c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
395e86241dd6cf52eb0fc5cebd901eb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord518
ord666
ord667
ord669
ord598
ord632
ord526
ord529
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord570
ord648
ord576
ord100
ord616
ord617
ord619
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ