Static task
static1
Behavioral task
behavioral1
Sample
827de0f1847d37ee4671cf4d5392003b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
827de0f1847d37ee4671cf4d5392003b_JaffaCakes118
-
Size
187KB
-
MD5
827de0f1847d37ee4671cf4d5392003b
-
SHA1
168a54807e3df0cabff4430eb30bb64713caeab8
-
SHA256
68dd863c36aa2da4e258c1612187595f36492d2c1976951cf449564077bae2bc
-
SHA512
9d78d79e23ad30628a3ee26bac3830f581f3dd798db0f6a980eb44111c8a9aace71e2f1609c61cb5e0d8f800088e8587fc241edaca6236c81f84d7701479428b
-
SSDEEP
3072:78jdvCRJDExCCY1C165zqOsUzME0HhmESEUM5QpulNQtAOSxWNhwxCKgXLI9ZGW:mKRKxxdEsU49H1NQtpSxPxWXLIbX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 827de0f1847d37ee4671cf4d5392003b_JaffaCakes118
Files
-
827de0f1847d37ee4671cf4d5392003b_JaffaCakes118.exe windows:4 windows x86 arch:x86
994eda553403753a0eda38a5898bbe9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord581
Sections
.8888 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.8888 Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8888 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ