Static task
static1
Behavioral task
behavioral1
Sample
a640961366d77a6e1776ee7b036a982b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a640961366d77a6e1776ee7b036a982b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a640961366d77a6e1776ee7b036a982b_JaffaCakes118
-
Size
16KB
-
MD5
a640961366d77a6e1776ee7b036a982b
-
SHA1
798308e772fe91bf7bcdbad72d9a9edaebb97200
-
SHA256
5b72cce45bc45d4f5efb1a5062e8be8ca221c1ef36365d9a6952142cfc0d084d
-
SHA512
f35b47796a1d712a5195a64202bb653b46bf1e388ddbf60fedcf385b76f325ac60b5b7ae10794eb265d3450893098eff1cb4f78f4aa4ab5ada51e74e81ab9591
-
SSDEEP
96:dEuBLjdvF1rJXrMnJr6NfQb5ohRqF7hBIlnpZOZxXDj8hk0VnvlprZDiL/Ne2y2h:5dvHVXrm42FZFBI1prhvvlp4y4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a640961366d77a6e1776ee7b036a982b_JaffaCakes118
Files
-
a640961366d77a6e1776ee7b036a982b_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b0c8e9fc721d0cf3a17360ae83d7925
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ