Static task
static1
Behavioral task
behavioral1
Sample
f0b1299681aa55c36124e4d543f564d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0b1299681aa55c36124e4d543f564d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0b1299681aa55c36124e4d543f564d4_JaffaCakes118
-
Size
20KB
-
MD5
f0b1299681aa55c36124e4d543f564d4
-
SHA1
09c6655a017203f9dfec6f213541c39b5a67fe22
-
SHA256
1f887e0bb1da627d196fc3f9e2aa9f0ca1d485d96ebdde493e4ac0b1a894d3cc
-
SHA512
30ac2e107e08c9a2cb5671fb375b4e0a30d71391c825b1f77524ec8fc5c143e9ddab53777bc3f64ed9313b51ab0c914513f518d2a573160edeb5b58eaf64526e
-
SSDEEP
96:odUimMqeaMeUs+WQiybA2ocNPnjnIo+bewOV9HgsI9+LCQWmVKYK4m5mCD1Jw72:wU7MqetehRQiybAFcNTt+b+Ap7qKwn7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b1299681aa55c36124e4d543f564d4_JaffaCakes118
Files
-
f0b1299681aa55c36124e4d543f564d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
ecaa1b0194d100b65e97ea639b6a76ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
msvbvm60
__vbaCopyBytes
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ