Static task
static1
Behavioral task
behavioral1
Sample
454cf1abd04df69460faf651d160efb8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
454cf1abd04df69460faf651d160efb8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
454cf1abd04df69460faf651d160efb8_JaffaCakes118
-
Size
16KB
-
MD5
454cf1abd04df69460faf651d160efb8
-
SHA1
00af693bb4adf73163e880b3a50a7a1681a46089
-
SHA256
06fd8bd391b2b73752c77e93affc77e5c006ccc9fc402d3b1ea2f6225b487475
-
SHA512
14e99c166886096193a6481ca0fc591934a77f781e8fd303e31eb585b2784372d8762dbee55e9e2fc740729a6459e8eb0ef2f22f3f2a32ac1da7e53c724fcce5
-
SSDEEP
96:Is6kaDoIJIjUEIIcu7TCYgxW2LiiFVzknj95LzeWogjwE32:x6k+zs0IcgUV/VMj9teijwE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454cf1abd04df69460faf651d160efb8_JaffaCakes118
Files
-
454cf1abd04df69460faf651d160efb8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c944a4ab2685b9a5b1876e6657e6139d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord520
DllFunctionCall
ord600
ord601
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord645
ord100
ord617
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ