Static task
static1
Behavioral task
behavioral1
Sample
aad063b0301bc8e44838400ae987b2c3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aad063b0301bc8e44838400ae987b2c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aad063b0301bc8e44838400ae987b2c3_JaffaCakes118
-
Size
20KB
-
MD5
aad063b0301bc8e44838400ae987b2c3
-
SHA1
11252da587bf052cdff7a96ffae38baa1bc79a74
-
SHA256
3218282e1b31005fdb5eb69869bc118f3169c51ac568f95484b133dd2f11f646
-
SHA512
28f749e14083426376365859ebb4e2347b5e5855d8b66371fede5b3031008b757dac41f172039721d160add51f6d88c5ffe2a5b58f953e8dab9f3a39c6daaa5f
-
SSDEEP
192:f3nLqE0/IDY3z/lU5AKOw34wmUAuIw3xbURfIw34wBUNfIw34wyU2Iwd6Q7mM:GD/IE65AKeTUAuBURfIoUNfIPU2RmM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aad063b0301bc8e44838400ae987b2c3_JaffaCakes118
Files
-
aad063b0301bc8e44838400ae987b2c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec7d6d792151e318b7730c48b2572fc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ