Static task
static1
Behavioral task
behavioral1
Sample
bbd1bde3bfec6fbd9068bb1471538a72_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbd1bde3bfec6fbd9068bb1471538a72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbd1bde3bfec6fbd9068bb1471538a72_JaffaCakes118
-
Size
16KB
-
MD5
bbd1bde3bfec6fbd9068bb1471538a72
-
SHA1
ed0a5240d3cf756c49d7024a74b01e6b9d8587bc
-
SHA256
925b2e94f0d296a2a210541a357bc5a60f0630f8672b7edb7dc89d4f64effee9
-
SHA512
0db7619afd05e615ef6eea254ec8ae05b673f4e941895a66b8269e0e9973703950f1f9e843de7dc78be943c65ce8bab09954e1ba97b15dd8dd11358b11ef0daf
-
SSDEEP
96:PL4AFr7oNpRqsJ3QXDje7xVPflprZDiL/NHqKR1QMiNEHu2:PDdoNJDPHlpeC6O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbd1bde3bfec6fbd9068bb1471538a72_JaffaCakes118
Files
-
bbd1bde3bfec6fbd9068bb1471538a72_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e7f9ddb39b4d1ff21e9e61edf088f05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
byfexxmodaca
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ