Static task
static1
Behavioral task
behavioral1
Sample
010dd3c9720d86d048b2f57c13fae6c5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
010dd3c9720d86d048b2f57c13fae6c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
010dd3c9720d86d048b2f57c13fae6c5_JaffaCakes118
-
Size
1.3MB
-
MD5
010dd3c9720d86d048b2f57c13fae6c5
-
SHA1
dcf932d4fb2adb98b18ba92db8eb00199aeab130
-
SHA256
69922ba85a5b4a559cefbaaa6ff3c8bf621a04fe4d3c68128cf3e22fc69f7074
-
SHA512
d4bba6b97e55cc52ccdff668cfa1251cb93e6ad0bb8719106c24280f075506a9b7e95a8bb2ae5879add5b78663487344052db1372632a93dfdc2e18e906836da
-
SSDEEP
24576:U85UpMjSCylFbHXo5zUUDp8357l2L3uWTIyYg8y4aZ7cH15LfK2+c:UDI/Dp8357cL3uWTI7g8y4aZ7cH157R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 010dd3c9720d86d048b2f57c13fae6c5_JaffaCakes118
Files
-
010dd3c9720d86d048b2f57c13fae6c5_JaffaCakes118.exe windows:5 windows x86 arch:x86
25ab2faf0cfdb39c8559001a0c10e208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarSub
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
IsWindow
advapi32
RegQueryValueExA
Sections
.text Size: 172KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ