Static task
static1
Behavioral task
behavioral1
Sample
e4bb958feffec62b114d293b4b5db3ff_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e4bb958feffec62b114d293b4b5db3ff_JaffaCakes118
-
Size
144KB
-
MD5
e4bb958feffec62b114d293b4b5db3ff
-
SHA1
4c4ea1ef00da39e9d70a4ccf2c9acb1177c973c1
-
SHA256
1f2c19f5f5bf5123090022617b4ae634f1e64b9b399bfd7282b30d41860e1d72
-
SHA512
a73f0bf6a866d339123983c1b41ccf18b95a3aa0f402edd63dd1fc48bfb0eee83535d9e15b36eaba334bcd31d0dd436de241fa47b814bfbb9ea392040957185d
-
SSDEEP
3072:jxNnwjviSLYebAoXdzbdTMu92tBEjQx+9bz6nFsT0/HKljvOiNdMdWE2i6rl:j/YTbAoXdzbBPmKQQ0FpPgFE2Vl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4bb958feffec62b114d293b4b5db3ff_JaffaCakes118
Files
-
e4bb958feffec62b114d293b4b5db3ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
375c7402f8748b0ff0440c4212cdf8d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
__vbaVarSub
Sections
pec1 Size: 61KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE