Static task
static1
Behavioral task
behavioral1
Sample
220f5074c100c657c1e359df05d675c3_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
220f5074c100c657c1e359df05d675c3_JaffaCakes118
-
Size
304KB
-
MD5
220f5074c100c657c1e359df05d675c3
-
SHA1
327968d74c17c9ae7f48d5429727e6c9402192d7
-
SHA256
704db1bd8dcd6d797b4d8fd26e725374041b4259c774dbd3c6eaddbd8c2ce85c
-
SHA512
ec7160b4c6dca3c89339dab76642b25304384ec86a411b6ca21962ec8a009246a000e811c6e6afbb679c221689b5983a8306463bbfdc2fe54a104d5cda269773
-
SSDEEP
6144:u1fTmWo5tDPHzx+5hwNAuH7qfln6+IL5lhsxpOtKFz0Sj:Wbfo5tzxAhwy4OCsHOt7W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 220f5074c100c657c1e359df05d675c3_JaffaCakes118
Files
-
220f5074c100c657c1e359df05d675c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
5354976f66136c2cd4b8cadc9b236a21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord665
ord300
ord595
ord599
ord306
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord616
ord581
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE