Static task
static1
Behavioral task
behavioral1
Sample
aedd89131f4498182021cbe4403d3baa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aedd89131f4498182021cbe4403d3baa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aedd89131f4498182021cbe4403d3baa_JaffaCakes118
-
Size
18KB
-
MD5
aedd89131f4498182021cbe4403d3baa
-
SHA1
cdeae2905e70caa14d39ea13c20a7407757ea7bd
-
SHA256
2dd7e33d6190154885da7dd46932dc7719a846e49df3d1f5257e51c9cc4261b2
-
SHA512
a5657447cc01b7b00c1f514e7169feb57d4b94c54be3442a2d4c8d3d4f1db198a320ff91df6c46a8db9f3987f0a200cfd3e876e023254cc660b01ae87ef38066
-
SSDEEP
384:+AVukunp/F2i1PaNDQuRid54dx5w0UKiMB08oBUJBMm903397:+AVukunV18MuR64Lvc/0Btkt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aedd89131f4498182021cbe4403d3baa_JaffaCakes118
Files
-
aedd89131f4498182021cbe4403d3baa_JaffaCakes118.exe windows:4 windows x86 arch:x86
3f23da773aa68a2cf6453f3f669f059f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaStrI2
Sections
.text Size: 12KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE