Static task
static1
Behavioral task
behavioral1
Sample
135dd5e858209dea5210f4ee10709198_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
135dd5e858209dea5210f4ee10709198_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
135dd5e858209dea5210f4ee10709198_JaffaCakes118
-
Size
20KB
-
MD5
135dd5e858209dea5210f4ee10709198
-
SHA1
b7d65a58fd5cfae46f494447ecdca80405a8634d
-
SHA256
7e0efbfb360981f6e3a71b3cd93bc3e8121020ea6ce1d06cd25e975c84dc088a
-
SHA512
3e4daab471d298456f0d26127750b6ad3e07218783cd536163a8426b89ba6a7f3abff109cc2f545a30a2f65861ae2c2dcee79f70c552ec98ce8023cdce2e5c9a
-
SSDEEP
96:hksybgA/EAsErbLNMEQo6RjYAwHm1fhSC1PJcju1I5l6lQQU/QlUkTUvWaRAnm9v:u/EQbrQo6RjYAwG1fSSSCi4hEg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 135dd5e858209dea5210f4ee10709198_JaffaCakes118
Files
-
135dd5e858209dea5210f4ee10709198_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8b9b44a4f26ef8e342579ec19b8d7af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord669
ord525
ord527
ord528
DllFunctionCall
ord600
__vbaExceptHandler
ProcCallEngine
ord535
ord100
ord616
ord618
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ