Static task
static1
Behavioral task
behavioral1
Sample
0fb36e26a80d5f456015f2827b33c27e_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0fb36e26a80d5f456015f2827b33c27e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fb36e26a80d5f456015f2827b33c27e_JaffaCakes118
-
Size
116KB
-
MD5
0fb36e26a80d5f456015f2827b33c27e
-
SHA1
c962451f04831232e9e797974a61f884d78bf163
-
SHA256
da36ca4133ce78b0f6059f776efefbbfe7e7f33de92f9f9fca8783d334e557cc
-
SHA512
227f4fb3b189ab893f6a126f8519fb42aa461e13509de83147f1da1bec908edb047e740fe8bab0fe5f25c06b9252dcd81edc59ac5162d5c3607ed3671cd4ad2b
-
SSDEEP
1536:Lh6a2NxMXANDZ646q9ssyKgn1WenabnVb8pmEf1y5BnJAGVDaV1uPRPAaV:Lh6pLMXAL64/xXz9JAGV6M9AaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb36e26a80d5f456015f2827b33c27e_JaffaCakes118
Files
-
0fb36e26a80d5f456015f2827b33c27e_JaffaCakes118.exe windows:4 windows x86 arch:x86
620f99af609d9f95664226b9a7c9fabb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord595
ord520
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord648
ord100
ord617
ord619
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ