Static task
static1
Behavioral task
behavioral1
Sample
2ab2106bf97dab808a89b2c7c6467dc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ab2106bf97dab808a89b2c7c6467dc9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ab2106bf97dab808a89b2c7c6467dc9_JaffaCakes118
-
Size
143KB
-
MD5
2ab2106bf97dab808a89b2c7c6467dc9
-
SHA1
144decb5fc702de88d628e89a936c4dc89a5a208
-
SHA256
f4df2614038e72166d656c8e6f18edcd62c907dbe148819e28e697f1d3406a6b
-
SHA512
f712e7ef34e76c03ae6fbb591c617b3857fe9c5b64a1ac34245c15a5ae926adc3a68b0b451532dbcacb1b08d88194386aadb3c215abe8ecb5e091322ef8b860c
-
SSDEEP
1536:5rZtaewPBaF79KuUbYLKjjna7SGJFC4M+kwFZJSSBoax1FT6rX+bxf7:5DahPBarKpbqKjj0PJFPkwF3s4Mrub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ab2106bf97dab808a89b2c7c6467dc9_JaffaCakes118
Files
-
2ab2106bf97dab808a89b2c7c6467dc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
375c7402f8748b0ff0440c4212cdf8d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
__vbaVarSub
Sections
pec1 Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 142KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE