Static task
static1
Behavioral task
behavioral1
Sample
10038bf12b2fec1ea6e921c295b64668_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
10038bf12b2fec1ea6e921c295b64668_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
10038bf12b2fec1ea6e921c295b64668_JaffaCakes118
-
Size
280KB
-
MD5
10038bf12b2fec1ea6e921c295b64668
-
SHA1
cbed7fc78f0f9f6694f60defa239aa96e4b8b845
-
SHA256
ef40c6ddb4ef634c385d69d2719a8d5f450aff4bdb6c0c8b65df10cab205f214
-
SHA512
6301ed80f494218787a8732ff0b4b46e6045146c30b4802c117d88e607537976e23fd834df35710e62db02f787338cba03b6e55f8b937a109b37a1274a3776c0
-
SSDEEP
384:7b9m8VwjAXwpdxgfx7ZJRvRReUx+WBsHxQLkbynSU6GsooSqv5J6j2jK3DpIuZbh:7b9hVwEfddAOwMbWl7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10038bf12b2fec1ea6e921c295b64668_JaffaCakes118
Files
-
10038bf12b2fec1ea6e921c295b64668_JaffaCakes118.exe windows:4 windows x86 arch:x86
74cc9845dc2d7fedc0095b0ace718d22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord713
ord717
ProcCallEngine
ord537
ord645
ord573
ord100
ord617
ord650
ord581
Sections
.text Size: 272KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ