Static task
static1
Behavioral task
behavioral1
Sample
d0c1f711b16375f46484e31dd9d1b423_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0c1f711b16375f46484e31dd9d1b423_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0c1f711b16375f46484e31dd9d1b423_JaffaCakes118
-
Size
164KB
-
MD5
d0c1f711b16375f46484e31dd9d1b423
-
SHA1
63e522995c0a22f109b6eac1bf64d83500157e5c
-
SHA256
350502b9230f230ca54d3a32eaecd923cfc32250267e7bdaf2f741afc8f4a805
-
SHA512
cf658b30c81b20108bea8e255ee37e33ab60a12d2c059bec3f157a9f892b1f28e61ed99d84bd0f3ebcfa5c6d9851e0caf439cf4be9c3a49c3573ce5bb5189188
-
SSDEEP
1536:TMzdwLFQiJ0DXf9f7ZOQtdZS33RG9OlNATZxCIQcRaenSo6t6YMd7XRKQ8d+TLi9:TMbLDf5QOnsoXDE5QtOEarw2rGyfB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0c1f711b16375f46484e31dd9d1b423_JaffaCakes118
Files
-
d0c1f711b16375f46484e31dd9d1b423_JaffaCakes118.exe windows:4 windows x86 arch:x86
b103e0582bc2168ee8b3aeea7f628360
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
ord516
ord628
ord631
DllFunctionCall
ord563
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord100
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ