Static task
static1
Behavioral task
behavioral1
Sample
dd30a308248580ded7633cb5fa8589cc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd30a308248580ded7633cb5fa8589cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd30a308248580ded7633cb5fa8589cc_JaffaCakes118
-
Size
28KB
-
MD5
dd30a308248580ded7633cb5fa8589cc
-
SHA1
75efca942c75830d1f1b9b4f3c4676e28b49073b
-
SHA256
a6dc5fd9e4c6a5903b73c84bc42054e119ffd684fbac9741c09c2d1ef20fee43
-
SHA512
55d9c16738ae4fab2e8f24a1807c5c905764fa029b6c19931fbdd28d8266621a092550ef3c7f7d5cc6ff05f6134958fd003cbf5a761416b34efe64352e190d34
-
SSDEEP
384:NveXD8r4rnqc1o/HTCnYbhtXTxOuJJm6mPI:52brqc1o/HewTxp5aI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd30a308248580ded7633cb5fa8589cc_JaffaCakes118
Files
-
dd30a308248580ded7633cb5fa8589cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f21f9476c67d8088fa00ae76f15c011
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord518
ord666
ord595
ord525
ord526
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ