Static task
static1
Behavioral task
behavioral1
Sample
224787bc601358a932833c8c6013cf25_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
224787bc601358a932833c8c6013cf25_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
224787bc601358a932833c8c6013cf25_JaffaCakes118
-
Size
24KB
-
MD5
224787bc601358a932833c8c6013cf25
-
SHA1
5db6519e21bd0ea7158c8161ce130c435027b23f
-
SHA256
29c3c727972f2438f6523fe6a1cb47b5737fa86c0b5596101f0139b355eb8cce
-
SHA512
4a41f900e23b9547270e0cd0f6462b06fbb3155011dfc3acf626f17292e0059a38f8eafb5ab441be307a066185e56501d7ad9955f556bd0eb65081581e310a4f
-
SSDEEP
384:5b+gTtVQ9HBaaspmIj4TP++lumpWEPA3:5aghVcHBJsp7sTP+QDpVY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 224787bc601358a932833c8c6013cf25_JaffaCakes118
Files
-
224787bc601358a932833c8c6013cf25_JaffaCakes118.exe windows:4 windows x86 arch:x86
0eb4ede05dc6a68bfa050a3925945c6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord519
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord100
ord689
ord610
ord616
ord617
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ