Static task
static1
Behavioral task
behavioral1
Sample
fc095f334cd968d2fe53e9893cb272cf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc095f334cd968d2fe53e9893cb272cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc095f334cd968d2fe53e9893cb272cf_JaffaCakes118
-
Size
167KB
-
MD5
fc095f334cd968d2fe53e9893cb272cf
-
SHA1
9d68bf814bf1711becd70c03b9a83e04d8ee79d4
-
SHA256
68cbee0cf82d78076286fbe8d4c18fcb0b1718d706b88bd368853f2f6900d0b6
-
SHA512
ea1004389f5eb36ab5a2ede3e94a634cc41f77e7a224da5eb4a87c375837fa0d9cd1dd968381e2390a8cf50362c1c8e6922d1fadc13ea76571af5db51097c31e
-
SSDEEP
3072:ZQZCuAXbvTzYb4qe69nt4fhZ8EsOtFihfPR6bY21idAxmgzjWk1ZX8X:KZCuAr3c4qespWFMwB1idAB/T1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc095f334cd968d2fe53e9893cb272cf_JaffaCakes118
Files
-
fc095f334cd968d2fe53e9893cb272cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1ee013990a68336cdb453b645a9b63f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord665
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord576
ord100
ord619
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE