Static task
static1
Behavioral task
behavioral1
Sample
Informazioni.Doc _______________________________________.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Informazioni.Doc _______________________________________.exe
Resource
win10v2004-20240802-en
General
-
Target
8e2247050d22e7e918dd183ec89505a1_JaffaCakes118
-
Size
136KB
-
MD5
8e2247050d22e7e918dd183ec89505a1
-
SHA1
d48dc6c2d0270be1845ece6c7d360e1e78a8f67e
-
SHA256
716c107975b218997e15145ea71bddca1ead24ed0d4ce72736869eca8e4918db
-
SHA512
58a495c227188835edb2ca6aae1619dc5fd078e2ac684a03f4a7646a2045fe6baaadda48b557ece1869fc6a73533ebca061b42c49918d2847892d2a915eedbff
-
SSDEEP
3072:WNrs9N5+orcovZDbOdwaq85oinhS29B2ejgAOh64tkN:8re5+4wFe8qesm4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Informazioni.Doc _______________________________________.exe
Files
-
8e2247050d22e7e918dd183ec89505a1_JaffaCakes118.zip
-
Informazioni.Doc _______________________________________.exe.exe windows:4 windows x86 arch:x86
d69c6479660f6fc7022a75a7d35f4ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaVarSub
Sections
.text Size: 127KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE