Static task
static1
Behavioral task
behavioral1
Sample
279925894d2da5c64366f104a065cc17_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
279925894d2da5c64366f104a065cc17_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
279925894d2da5c64366f104a065cc17_JaffaCakes118
-
Size
40KB
-
MD5
279925894d2da5c64366f104a065cc17
-
SHA1
c39e7f914e972b17797478a5146f4e2219b5bfd2
-
SHA256
1b553b122bd4f66509a8065d9b43baa116eb39d8c22537631c26df025927856d
-
SHA512
09cbe7906b85875fce3ef7a72166855e674d9ead7c350ef5c729d0e33c5bc9fc7668854940b8cef7e4f543967a4fa7faa2eb0954b7cbde4732c2d5fe2621da7e
-
SSDEEP
768:IkisglXFbcQ0HGDab+yoH784xfv0BOCecXnoq3W:IkiswVbcQ0HGDAoeO03W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279925894d2da5c64366f104a065cc17_JaffaCakes118
Files
-
279925894d2da5c64366f104a065cc17_JaffaCakes118.exe windows:4 windows x86 arch:x86
e1aaeb608c361ae2b7e4e60952403e19
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord573
ord681
ord100
ord617
ord619
ord581
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ