cmndFind_Click
Static task
static1
Behavioral task
behavioral1
Sample
16654e31dd179dc7e467ea69c22bb0c9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16654e31dd179dc7e467ea69c22bb0c9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16654e31dd179dc7e467ea69c22bb0c9_JaffaCakes118
-
Size
264KB
-
MD5
16654e31dd179dc7e467ea69c22bb0c9
-
SHA1
d08d71d056eeb57454a8dbd023d57a05dec6a587
-
SHA256
b2998aa4d6013c4e0dccb535e9cf3a9012ba8336718144538ab47284c46cf855
-
SHA512
ca7adb33b8a5988a84c576d8f3c2fefda2693e8c7e2b0b952dd030de61638f67c8cb8cbf061759bc11ba074f3a33664e0358166fef51ac0098073febbe9c27a7
-
SSDEEP
3072:sXDC3uD4Cled7JC+SCJgE/+ltEU0OoHKk5xZmquAT7pQ6wkEYsuqRH971q+Ram/E:ce3uCRJgEWTCBKKXuKO6XnbqHZqYfzuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16654e31dd179dc7e467ea69c22bb0c9_JaffaCakes118
Files
-
16654e31dd179dc7e467ea69c22bb0c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
73af91b5e8dd1864e9500ea634d7aede
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord589
MethCallEngine
ord516
ord518
ord593
ord300
ord594
ord595
ord598
ord599
ord306
ord520
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord645
ord648
ord571
ord573
ord685
ord100
ord689
ord616
ord617
ord650
ord581
Exports
Exports
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ