Static task
static1
Behavioral task
behavioral1
Sample
f020611b5be266182230ab10910b91e2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f020611b5be266182230ab10910b91e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f020611b5be266182230ab10910b91e2_JaffaCakes118
-
Size
156KB
-
MD5
f020611b5be266182230ab10910b91e2
-
SHA1
a0939acf6e1f4b152f325a8f356426d0ef17477b
-
SHA256
e5465b8f54aa67b0751f6fe1afff7c46b840ecd7f15135694f15a51bd9a032fb
-
SHA512
5895ee055c82f030982bf79efd9f932d23fb1fe6bf1fbaab25bb8313887220b1efd5cb772437b8e74b9c49fe3c9a9e580316d49b80f187cc3cb1880999881a2a
-
SSDEEP
3072:Sl27iCl0mWTCKmr0Q2ltZFbH8z8HVPKWcK7+5xfsFlhW+rjfAv05y78ev9Kiksdy:WFbH8z8HVPKWcK65xfsFlh1rjfAv05y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f020611b5be266182230ab10910b91e2_JaffaCakes118
Files
-
f020611b5be266182230ab10910b91e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
2da30a158e87e825b2eda45a3dc2d4ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord665
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord578
ord100
ord616
ord581
Sections
.���� Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.���� Size: - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ