Static task
static1
Behavioral task
behavioral1
Sample
0faaf51777baa3896d5c94ce15cd3eec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0faaf51777baa3896d5c94ce15cd3eec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0faaf51777baa3896d5c94ce15cd3eec_JaffaCakes118
-
Size
644KB
-
MD5
0faaf51777baa3896d5c94ce15cd3eec
-
SHA1
750932af02befc6f9bdd229bfc56961979f4dd94
-
SHA256
afb2bae7066af53c235192db90d47d7f44ba6470b2d9c1a2e2d2ac0b5f20b500
-
SHA512
4fdbbc404f81dcd2001bdb10200b0be09baf9d815d9b9de8b05dd33683d97063a16000c7cf768812c6275f269941c9988ee5556d58ef9b85a16db1fd3f909b0f
-
SSDEEP
12288:F+w1eItZBIN30Ns3EDB2iA8Nzsk8HNM2iMr:cwZt+3A8SSZNMBMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0faaf51777baa3896d5c94ce15cd3eec_JaffaCakes118
Files
-
0faaf51777baa3896d5c94ce15cd3eec_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf7f13bb1329f7feedb45562de59bd72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord576
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 632KB - Virtual size: 630KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ