Static task
static1
Behavioral task
behavioral1
Sample
ff58273d54ebb2be052348727978f105_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ff58273d54ebb2be052348727978f105_JaffaCakes118
-
Size
557KB
-
MD5
ff58273d54ebb2be052348727978f105
-
SHA1
60e481e749494fc56c97f5b02daf75456fa5514f
-
SHA256
eadfd15b75f3fcf3746a45a10da8be9d3956efef3207fe72ca3327ab8c1d39e3
-
SHA512
4a38cc151068cde172ac4f1d74190203d983da8fe0fbd565c02ad8e9fe518aa53375cded0083e66e57ee1fbf8ee5f84175952d8fcaba0caeaee08d272a686951
-
SSDEEP
12288:evCnyQjPtB9yYmQVIJ15QNpTBd47GLRMTb7:l7jPtOY2JYXd474mf7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ff58273d54ebb2be052348727978f105_JaffaCakes118
Files
-
ff58273d54ebb2be052348727978f105_JaffaCakes118.exe windows:4 windows x86 arch:x86
77fd30a262ab0de72a63d016d1db9519
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord660
ord557
ord665
ord595
ord596
ord598
ord520
ord521
ord522
ord523
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord530
ord717
ord533
ord534
ProcCallEngine
ord536
ord537
ord644
ord645
ord648
ord570
ord572
ord576
ord578
ord685
ord100
ord687
ord613
ord540
ord581
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ