Static task
static1
Behavioral task
behavioral1
Sample
fbecdde24d2b8538d6aa1c51371e3120_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbecdde24d2b8538d6aa1c51371e3120_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbecdde24d2b8538d6aa1c51371e3120_JaffaCakes118
-
Size
12KB
-
MD5
fbecdde24d2b8538d6aa1c51371e3120
-
SHA1
a252dbb59c02659f18690d90d02bc1dcbca35f0e
-
SHA256
c180ad6694517d7150c59d316b33cc2400c1ffd4f4e5732d571fa8b60f121208
-
SHA512
80ae3b4a0c0994786c298e7a80051f94677ed624309fb5226322bc690eebb919a3fefad78ab9e0f7f3ccfcc23bb375c20822e50485218293296f7801157e401d
-
SSDEEP
96:U4IcWX16L4RmrFmFi0VwqCOG26cGa2Uvg23w6xatAp15SgRhKl4NtJH7IBI:J81k4RGpiPGMGaTL3t8ipndRhqI2I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbecdde24d2b8538d6aa1c51371e3120_JaffaCakes118
Files
-
fbecdde24d2b8538d6aa1c51371e3120_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a7ad8acac51aad13d0b521eae881eda
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord666
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord619
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE