Static task
static1
Behavioral task
behavioral1
Sample
94a7d5c043ecbf2339e16ebf3b39e347_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
94a7d5c043ecbf2339e16ebf3b39e347_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94a7d5c043ecbf2339e16ebf3b39e347_JaffaCakes118
-
Size
20KB
-
MD5
94a7d5c043ecbf2339e16ebf3b39e347
-
SHA1
a969c69eaeefc115e6ef3cb705df95e5c8022810
-
SHA256
0826ed14793109160ee9ebccbd17c9b9c1e2773b09687409f898b9409248881f
-
SHA512
d545663ae688f25933e3c485cb45dd718d287efbbdcec0de8dec0192d226beecfdd0c070c84106604f8b379fe2d13e9f57a03248ccc65e5d68f1ae310e3a20e3
-
SSDEEP
384:1XTGCY5UvZGEeor9gwV1nB9CFu9hSAdB:dGCiUqorvbnBoFuVdB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94a7d5c043ecbf2339e16ebf3b39e347_JaffaCakes118
Files
-
94a7d5c043ecbf2339e16ebf3b39e347_JaffaCakes118.exe windows:4 windows x86 arch:x86
bcd77d33a4e1cee55f2c124644881305
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord593
ord598
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE