Static task
static1
Behavioral task
behavioral1
Sample
d3168c63c5141d38ea9949bd03ea28dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3168c63c5141d38ea9949bd03ea28dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3168c63c5141d38ea9949bd03ea28dc_JaffaCakes118
-
Size
124KB
-
MD5
d3168c63c5141d38ea9949bd03ea28dc
-
SHA1
c25dd9f8afb1e071fa55a58bedc19e6cc63fb60f
-
SHA256
648e86e8c48cc695928ec902dce369a47afe33848633dd1b106b0f79ebd349cf
-
SHA512
470c9e20f0a1c083db403cc4e3de26f017b1744932792a969360ae4fb83a347b02e6ebb1a5d56778e582570137fcb682573f8b47d9533528d432d586c67edd21
-
SSDEEP
3072:eHCWqwzLa3naro+kDeFm0gADUeuq7fACl7m6:ea+lA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3168c63c5141d38ea9949bd03ea28dc_JaffaCakes118
Files
-
d3168c63c5141d38ea9949bd03ea28dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ef79886c027ee0603dc825bee58d7e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord621
ord516
ord593
ord709
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord712
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord572
ord681
ord100
ord616
ord618
Sections
.text Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ