Static task
static1
Behavioral task
behavioral1
Sample
27b44e93b6ecd5f35a579193104fd39c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27b44e93b6ecd5f35a579193104fd39c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
27b44e93b6ecd5f35a579193104fd39c_JaffaCakes118
-
Size
612KB
-
MD5
27b44e93b6ecd5f35a579193104fd39c
-
SHA1
769a325b62210edbcd621e7f02288e3e2d3c02d3
-
SHA256
d78a06013a80ba3f039164feb7841104c96cde1496e643c67f0dc90f17b6450d
-
SHA512
b23f250ddb821ecddb9b913c0b1aa134b5af610168f4eb54d715c4083fad8feb53450873ea146f6e6f68f66f86ad3d0b33c49fc867db3c7b9fbd9e0f87a4f4a7
-
SSDEEP
6144:X7PqiPVh56N9BMI1h2kLAeHTC8JdX7pfBFMyK8TkHMQLJ5kUAO2tOGt4i2dGV:X7PLdkLT2ZezDdXdfUkSM+5AZ4f6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27b44e93b6ecd5f35a579193104fd39c_JaffaCakes118
Files
-
27b44e93b6ecd5f35a579193104fd39c_JaffaCakes118.exe windows:4 windows x86 arch:x86
2baf2cf5457a6cbc889a1294e9abb0e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 604KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ