Static task
static1
Behavioral task
behavioral1
Sample
d35cfead6a5e3915d420e08d3eb559a5_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d35cfead6a5e3915d420e08d3eb559a5_JaffaCakes118
-
Size
304KB
-
MD5
d35cfead6a5e3915d420e08d3eb559a5
-
SHA1
0a89092417dc50cbb244b98b1e4ac04937291729
-
SHA256
f825e92a4f58ae26daed36667cd333bcf7678c8aa8a0a17d45f2ac2a81fc1342
-
SHA512
9a4b050580990f1d37d061b99c92648d569eacabfe894c8142c84e0bd8250fe7db68acd2b5273b3f67ad277479a680d9f6a760ee7c2d77ce163cc97b531c6f1c
-
SSDEEP
6144:p5syahYyGo06ky7dUOOravJUBxYJ5JqHrO0VVFx1dBqA5iPku78WC3IaO:p5vadGo0gdlJUBx8yS0VyAzc8WCYH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d35cfead6a5e3915d420e08d3eb559a5_JaffaCakes118
Files
-
d35cfead6a5e3915d420e08d3eb559a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
5cbcce4ad916e4f65cdb0920a36f1470
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord621
ord516
ord595
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ