Static task
static1
Behavioral task
behavioral1
Sample
a31d6927bf04e3ffd52f558de7210037_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a31d6927bf04e3ffd52f558de7210037_JaffaCakes118
-
Size
255KB
-
MD5
a31d6927bf04e3ffd52f558de7210037
-
SHA1
095eb395c68c207e41a354efbbd22e77ff75417b
-
SHA256
58dbfc2bc3e08cbbe98dcf288446c5f5ae9e71dc693f8cfb042f7eff90e62b1c
-
SHA512
81cdee6cbf20fce4085180888d6f659ddd72f8715085937c104ac950ef644cb0a7148e63bf7298d4840ef31725702a2d92f9ed8fb88b195dfa909d467d32da96
-
SSDEEP
6144:vuxXBYvNW6TnAIqf80BkhNygzGEUpQg2ciHvi6n8Lz:iB4WZrd8NygzlgeHKCSz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a31d6927bf04e3ffd52f558de7210037_JaffaCakes118
Files
-
a31d6927bf04e3ffd52f558de7210037_JaffaCakes118.exe windows:4 windows x86 arch:x86
b210500f405ec93b15f68eec341dd7a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord665
DllFunctionCall
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ