Static task
static1
Behavioral task
behavioral1
Sample
fd4c3e6d0d94203436318cf1ac9548e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd4c3e6d0d94203436318cf1ac9548e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd4c3e6d0d94203436318cf1ac9548e4_JaffaCakes118
-
Size
34KB
-
MD5
fd4c3e6d0d94203436318cf1ac9548e4
-
SHA1
34427ce9d1bd2476b84e0ed4cddb5011948396c5
-
SHA256
62b1287a3a41d38bd7f32af2a33fcf2f410cd1638b5c88d0fc7606238a4ed0f1
-
SHA512
55b36fef6a289c8df01cac3fecc07ea0b4461664d2f02cea76ee9ecaeffb2c17a37f731a552e09a874fb3914624cab2067b168f441c3fa05719bc65193e9ddb5
-
SSDEEP
768:V0xtUvnxUUJwTAYmxfeWu5/ZgCsLg+qiCVs0:V0xtUvnxXJYdmp9uBaCqg+qH9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd4c3e6d0d94203436318cf1ac9548e4_JaffaCakes118
Files
-
fd4c3e6d0d94203436318cf1ac9548e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
d69c6479660f6fc7022a75a7d35f4ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaVarSub
Sections
.text Size: 19KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE