Static task
static1
Behavioral task
behavioral1
Sample
dae1eb239616ccc2b0d36eca5302b0af_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dae1eb239616ccc2b0d36eca5302b0af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dae1eb239616ccc2b0d36eca5302b0af_JaffaCakes118
-
Size
94KB
-
MD5
dae1eb239616ccc2b0d36eca5302b0af
-
SHA1
ae821d7ec1d62732bfc77522420a8ab380e606d4
-
SHA256
df1d82d00f576ab8f8fe090dc28aa31d9e4465feeb1dc672e0ed054138bafe86
-
SHA512
34a46481fa1267e5cf476b48a72ea87c71f4021542ff164a69b24299647d72c747c9cd34f014e6e3d4b9cd5bbdb3e6292a847d2076dd7383571f726adc797ef5
-
SSDEEP
1536:7tPFNzjHlP7wjTXK5lFEk9C6hp91ZAQ1XXgxbMIpyYUfx7WQGDwL3USzjmbdW:J3zhP2Xbk9xhpDWQ1XOZ4jxK5I3USzj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dae1eb239616ccc2b0d36eca5302b0af_JaffaCakes118
Files
-
dae1eb239616ccc2b0d36eca5302b0af_JaffaCakes118.exe windows:4 windows x86 arch:x86
e011adadfa07c7cdd7feea7c2d15fb1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord626
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
ord617
ord581
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ