Static task
static1
Behavioral task
behavioral1
Sample
2b9e0ce19920720cddc376c0decbca9b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2b9e0ce19920720cddc376c0decbca9b_JaffaCakes118
-
Size
104KB
-
MD5
2b9e0ce19920720cddc376c0decbca9b
-
SHA1
93732ba1b70d382b10a53178b141724dd9f7174a
-
SHA256
f0b58000e90a6974fa3be556da8f816356e7da7d444504b8d258e480f28ba1e7
-
SHA512
27d0b0a548d344a6d74b5ace7e5507ff6d94f83892ba3154cf4bf8321b9ba4cd210634530d48d54b2e18382075f321352b8ec0dcb4f2d294a14fc13ec88c3c00
-
SSDEEP
1536:GZTEBBF423CGOknmFTcgh8hmVD+4XyUm2DsOlg14H+q0MXl:ITmCbFv+hUw1i3Xl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b9e0ce19920720cddc376c0decbca9b_JaffaCakes118
Files
-
2b9e0ce19920720cddc376c0decbca9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e1bec2b03d010303a8de7159534e8831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord660
ord520
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord531
ord716
ProcCallEngine
ord535
ord644
ord645
ord572
ord578
ord100
ord617
ord546
ord581
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE