Static task
static1
Behavioral task
behavioral1
Sample
eaff9605664d379c6e7f7ccf67e39533_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eaff9605664d379c6e7f7ccf67e39533_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eaff9605664d379c6e7f7ccf67e39533_JaffaCakes118
-
Size
102KB
-
MD5
eaff9605664d379c6e7f7ccf67e39533
-
SHA1
8b6ed4a55a9a9c3d06abeafe52b44c6184a2c1da
-
SHA256
6727304eefcd757465ef790cf2f393efbb59afd425d2d7fc56c296a2643764a9
-
SHA512
7b0786972a1732c76a6f912c731f888709d925ddaaf6da8199db18acd49f367331be9867b8654dd530dffdcc113a2bf275f02bda0776d6aab1cab8ae4a23ff07
-
SSDEEP
192:jIgo7/bMKHGyb+hkDWBZ63W4NLEBmM8y7y7y7y7y7y7y7y7y7y7y7y7y7y7y7y7y:jIl/bMKH/qhkCBZ34yBmMd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaff9605664d379c6e7f7ccf67e39533_JaffaCakes118
Files
-
eaff9605664d379c6e7f7ccf67e39533_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b1e39f3a87e7479208d24f3bee5fad4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord572
ord100
ord618
Sections
Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE