Static task
static1
Behavioral task
behavioral1
Sample
eb5d9e99dd8d41a891f43817cebdc0aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb5d9e99dd8d41a891f43817cebdc0aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb5d9e99dd8d41a891f43817cebdc0aa_JaffaCakes118
-
Size
12KB
-
MD5
eb5d9e99dd8d41a891f43817cebdc0aa
-
SHA1
b0a69cbb9870e83f10e5827724382b3abe6434d3
-
SHA256
a83a13bd3b4f511d07c133fa1c2ea3f9f314628f3a58317913a5991d39a7d51b
-
SHA512
ce29a74f942a153bd87e56aad1c5319b6c27b2ad543ab63ed961386a042210e8b1cf457bc8d99232a88d7bc005984d1200bb1729798c09a98bb6c22664354144
-
SSDEEP
48:yghmiswsQ+FKHh9jDkdgH+qOxlDhWjujC+7ME37wHNbK2:B3sKjodgH+qOPjC+ovM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb5d9e99dd8d41a891f43817cebdc0aa_JaffaCakes118
Files
-
eb5d9e99dd8d41a891f43817cebdc0aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
516e10bc7c7d951efdc8db248cda152a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord667
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ProcCallEngine
ord570
ord100
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ