Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_46a691951f5509444b7363de172c85a6.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_46a691951f5509444b7363de172c85a6.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_46a691951f5509444b7363de172c85a6
-
Size
414KB
-
MD5
46a691951f5509444b7363de172c85a6
-
SHA1
079d2992775d148f4218e8fe2faef0f0ec2397c2
-
SHA256
ca1fd7ccc5cc3440b10630643e584b8a49da646d6f04cfb6152d0469e6cad8d1
-
SHA512
961ce26c66a38507f9610bf51c55f61879918c2f42da669acedcd3e69c8387b2f6b0388b4e0577b3374100308e5b213bd1fd712eb71647995fbab3e9a629c4fb
-
SSDEEP
12288:03v6CfAjsFcHQYwod+C6maA+NQ4hZdxZur:0CwAQFc5d+Tv24ndxIr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_46a691951f5509444b7363de172c85a6
Files
-
JaffaCakes118_46a691951f5509444b7363de172c85a6.exe windows:4 windows x86 arch:x86
df94e17f23a4f960d11b0f49a154fade
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord518
ord666
ord595
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord606
ord713
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc_3 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.legion Size: 4KB - Virtual size: