Static task
static1
Behavioral task
behavioral1
Sample
2840171b523ade76f2e38c81b976a794_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2840171b523ade76f2e38c81b976a794_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2840171b523ade76f2e38c81b976a794_JaffaCakes118
-
Size
448KB
-
MD5
2840171b523ade76f2e38c81b976a794
-
SHA1
3a372b0f420928c0deeb153242fd68cd20a6b91d
-
SHA256
c8588338f28831aebb1504345f5eab68de0c6e5661c0721b835ab28e1b172e5f
-
SHA512
dd9b6fc71f187dcb3e522f1a1b7abb5cf7943641e2e4bf52e95e13d998887ad416d9e4b1e7d4cf3cab040388ea4b0a2b505a69ad65b66959bb6eba620ce2d3f4
-
SSDEEP
6144:ol8o5YL4VlNSoS4NcjjaruMMe5SH8Ej+TZulO95yrDEJOMf1hbuP7Cv:qYkDNHSaciiK1Et83yrwsYLuP7Cv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2840171b523ade76f2e38c81b976a794_JaffaCakes118
Files
-
2840171b523ade76f2e38c81b976a794_JaffaCakes118.exe windows:4 windows x86 arch:x86
3697944a64a62226d23da3306d9467c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
thumbs .db
MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbbzddh Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jmxxjfp Size: 80KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
plnakzn Size: 4KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE