Static task
static1
Behavioral task
behavioral1
Sample
1938b839fd2360874be4fb44b9334560_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1938b839fd2360874be4fb44b9334560_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1938b839fd2360874be4fb44b9334560_JaffaCakes118
-
Size
332KB
-
MD5
1938b839fd2360874be4fb44b9334560
-
SHA1
fe6913d1607c2918c933fd2a68c8cba028f12268
-
SHA256
40c026a7a2ba0443eb7d605ebcdf3cc874bdc308c1594916b38a44aa574c30d5
-
SHA512
8d893c90d3d4257782dfbef48fd5f56b988e7f9d7d1c4bec38fd957268a09299da7cb68f85a985520153428702d7f657f735469fe3671accfeaa4da69f82813a
-
SSDEEP
3072:xX0e1FB/DpKjCLHAmqsbLFaGBwEv/nAiiHfcMI2Xv7slthAANzK:xZBfkHfcM9sLU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1938b839fd2360874be4fb44b9334560_JaffaCakes118
Files
-
1938b839fd2360874be4fb44b9334560_JaffaCakes118.exe windows:4 windows x86 arch:x86
03a68af0ebf4e1ae2e344b31b5c08c09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
Zombie_AddRef
ord681
ord100
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
akevmui Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE