Static task
static1
Behavioral task
behavioral1
Sample
0ded1ea7cddad3121db90de7e22b3b7f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ded1ea7cddad3121db90de7e22b3b7f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ded1ea7cddad3121db90de7e22b3b7f_JaffaCakes118
-
Size
14KB
-
MD5
0ded1ea7cddad3121db90de7e22b3b7f
-
SHA1
7cf464efde100e338b96b08248b697a683495058
-
SHA256
1bbe984e2d7d205b5b831de093ec1bd120f9190100b82db2308e0008868f423d
-
SHA512
3f92a7166084617590e697cf837e659f326719522bc3a0418031b3822704feb23c327305898f31ab456710931b48b1be18ac464814b273351bd87e1f9f504e84
-
SSDEEP
192:zsP5pqxaXqvpUKlyIXaoWYBIQBXlUziw34wLw3jgow34wugow34wvvwgEyPpMu:PxtvpR1KkBHB6OPgojgomqNu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ded1ea7cddad3121db90de7e22b3b7f_JaffaCakes118
Files
-
0ded1ea7cddad3121db90de7e22b3b7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f6633fc0418e8a0ae38c82691dbd589
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60.dll
MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
Sections
. Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ