Static task
static1
Behavioral task
behavioral1
Sample
f848011fa43c0b7ebf24a72861b093bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f848011fa43c0b7ebf24a72861b093bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f848011fa43c0b7ebf24a72861b093bb_JaffaCakes118
-
Size
102KB
-
MD5
f848011fa43c0b7ebf24a72861b093bb
-
SHA1
83bcddd20b219952b5341ee4f01a8cc2b9817a2b
-
SHA256
298ea0df6a2fb725da6d5c42ef7fde7bc3f4632da6c9736e0d20c9e1655b546a
-
SHA512
b0ef8a261fdac7e70aeea36e8cff5fd2f23a1c4a82b1a6ef7a960edaa9bec41acc6582d5c623ca7faabcb5ce571eb3110d1661450f3335cc5e4453d547a8d989
-
SSDEEP
1536:tSFK2LIrevPjh4eOjZlTv9OXMxzEVX0f+gN0b03q+5s1CI/KIAW3:tSF5O2h4eO/xAsFqTEyvh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f848011fa43c0b7ebf24a72861b093bb_JaffaCakes118
Files
-
f848011fa43c0b7ebf24a72861b093bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
c5206acfd13c9dc4f947c130ba5c10a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ