Static task
static1
Behavioral task
behavioral1
Sample
242f944f7b65b931df3ab0cc7c8e272e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
242f944f7b65b931df3ab0cc7c8e272e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
242f944f7b65b931df3ab0cc7c8e272e_JaffaCakes118
-
Size
28KB
-
MD5
242f944f7b65b931df3ab0cc7c8e272e
-
SHA1
4ce22e7a5a76999a0d4a55fc21f2f6f546d97b63
-
SHA256
9c99602f5b1e6422d1b733ff608792da93293ffb240f3ba3a74f7fc48dcf1722
-
SHA512
1d92b8caabaaa0023eb87c490be726b393c634efaac7f696e99f7c3ffe0b73a7985ed482d9c8c63ddda0f8565fc32cec4451a4d72bdcde7641648d7f039ae726
-
SSDEEP
192:0jZFU+ERTph2A96L1bHQSM1cc94u4chBqcM1LiE+5xDBd9bRE621cc94u:cPUjTphhCb/iGGhBg1LiEQF+60G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 242f944f7b65b931df3ab0cc7c8e272e_JaffaCakes118
Files
-
242f944f7b65b931df3ab0cc7c8e272e_JaffaCakes118.exe windows:4 windows x86 arch:x86
c1966b0756465dbe9829e1efca51bba7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ