Static task
static1
Behavioral task
behavioral1
Sample
b62aa5788c36abd9a50a3f45d5bb1218_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b62aa5788c36abd9a50a3f45d5bb1218_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b62aa5788c36abd9a50a3f45d5bb1218_JaffaCakes118
-
Size
12KB
-
MD5
b62aa5788c36abd9a50a3f45d5bb1218
-
SHA1
1ab8f246c8a3b4c577b750d9d697a97150ef72a5
-
SHA256
13e65792ba96289ea1e61ab289fc6c472f0f86beb996153fdf600b2405ee9bd7
-
SHA512
96b798c51fbbdd790fe5e96a3dd5977ded8406e95eb330fce3c4a9aaf080d8b27d819e46f701fabc4c239eea80107b8055818ee8f420044a6098fbdafc773508
-
SSDEEP
48:yg+SKo+sbwdLWP6lIliLcUr2Ykq8jffcenqM7UMHbKHZlbv+/rM3c09V7wntbK2+:eK9bwdLWPUP2YMjMenrTbOrbGAMns2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62aa5788c36abd9a50a3f45d5bb1218_JaffaCakes118
Files
-
b62aa5788c36abd9a50a3f45d5bb1218_JaffaCakes118.exe windows:4 windows x86 arch:x86
b73f2c7aea6d071f18b0342a019785cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord100
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ