Static task
static1
Behavioral task
behavioral1
Sample
ac706aa221d928a93d657a61b68ac178_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ac706aa221d928a93d657a61b68ac178_JaffaCakes118
-
Size
116KB
-
MD5
ac706aa221d928a93d657a61b68ac178
-
SHA1
f263a0c2623c556dca346b02ac99b7af4df3a977
-
SHA256
4defe27b8a88716f7641c31a4f7b911b5127471bd189f5df659d4775dd778dd7
-
SHA512
1125148a68bf610cd4a84e0049a788f45935e9cbefe954cd3416987f2a862bd65a4998938b507bc282c99907d38edc52ae088a41e7ed4911d6694ab9a571aafa
-
SSDEEP
1536:pOXV26eBixii2fYEbtC65eTSj17rUnMmGCLHna5qkYJA2+AbU992joOs7:pOMixQXC655jZ+GSozYG2+AikjoD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac706aa221d928a93d657a61b68ac178_JaffaCakes118
Files
-
ac706aa221d928a93d657a61b68ac178_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca647a3977795872f36236c40ef017da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ