Static task
static1
Behavioral task
behavioral1
Sample
27e0749a8f68ecb42ff195d5ed7fe9ce_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27e0749a8f68ecb42ff195d5ed7fe9ce_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27e0749a8f68ecb42ff195d5ed7fe9ce_JaffaCakes118
-
Size
67KB
-
MD5
27e0749a8f68ecb42ff195d5ed7fe9ce
-
SHA1
92949331641dae019644454aa86aad3e038df29f
-
SHA256
9db7a86a5dd18cfb725add2286cb9b35b26f242e1922c9b9fd71480e87fa4932
-
SHA512
5233c6a6e3c76295d670890290a7fd072556184cecb153fa3fc16e7e3d669dada2f9cb5885739627be47d010414bf8140cad36f629f1679f712110f32bc1cca9
-
SSDEEP
768:yJN6Qdt2JW3YqKBx4VpmHaIB4YFWlXH7PB0W/coCPbO3LVn400FjyeNwX9Dmpwm:SxtiVJHaue1bPeW/cV/rFGeWX9D1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e0749a8f68ecb42ff195d5ed7fe9ce_JaffaCakes118
Files
-
27e0749a8f68ecb42ff195d5ed7fe9ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae412ed9d50f0e004aa5f90efbfe72df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100
Sections
.text Size: 72KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ