Static task
static1
Behavioral task
behavioral1
Sample
0d0d236f88de322f6d550d84c62b1405_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d0d236f88de322f6d550d84c62b1405_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d0d236f88de322f6d550d84c62b1405_JaffaCakes118
-
Size
88KB
-
MD5
0d0d236f88de322f6d550d84c62b1405
-
SHA1
755267f60a34b8077b0bb0417cc8aa65756cfc83
-
SHA256
1183162f5be804b06f2d0432f9d3f56cc57ece902efb413ded09500af54acecb
-
SHA512
68b5278cb2c6eed3d787bca71434b79011f5024eebc1c509b7cdd4d0e1a3121a83dc06a5202e8d110e99e50e3d8b4da96601437eb59fbf4596b43a513e2160f2
-
SSDEEP
1536:v7T70pK9rfvjvQcsHIAWuof9z1P9vQcsHIAWuof9R0pK9rfvoT:3QGLvjv1P9aGLv4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d0d236f88de322f6d550d84c62b1405_JaffaCakes118
Files
-
0d0d236f88de322f6d550d84c62b1405_JaffaCakes118.exe windows:4 windows x86 arch:x86
329af5c7657e5a0ea4c3a68aec489149
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ