Static task
static1
Behavioral task
behavioral1
Sample
19747435b0e3beeb6bf89f757ee174aa_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19747435b0e3beeb6bf89f757ee174aa_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19747435b0e3beeb6bf89f757ee174aa_JaffaCakes118
-
Size
24KB
-
MD5
19747435b0e3beeb6bf89f757ee174aa
-
SHA1
af964f74a70454e1a9e8ef22b7c3477ea6aea772
-
SHA256
c2e0f26af08cf7afced2753043f9c7bf4a48e1395b965238ce947f89a26a798b
-
SHA512
d8fb7999df246e362ad590cb87ac9477b2e7d94884b520b255db9360cac316571a804e406b49fb1ecf36af2552fe4d7bb838b62b999c92b3ac4a4a8d62213f30
-
SSDEEP
192:DMiA0GzpopAd4Arc6tlMy9hvtIBVmZf6R5RrIRSJRyb/8iDLun6d7RASji+zEI:4iAdz+pD6UyPqBkZf6RPd8GnqtRoI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19747435b0e3beeb6bf89f757ee174aa_JaffaCakes118
Files
-
19747435b0e3beeb6bf89f757ee174aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2ba9f2c637675b2d4ca44270c3cca8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord617
ord619
ord581
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ