Static task
static1
Behavioral task
behavioral1
Sample
28e524cc00f352eea77ac1fbe7064700_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28e524cc00f352eea77ac1fbe7064700_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28e524cc00f352eea77ac1fbe7064700_JaffaCakes118
-
Size
44KB
-
MD5
28e524cc00f352eea77ac1fbe7064700
-
SHA1
eec21b1deed561bed71e174d391b45752c704271
-
SHA256
03141245a4ed3b1c6c6b6125dcc32403fa2a199996a3b6b475a789807f0bad50
-
SHA512
2f7266b1ad62dc08a471237495588771af59f24f83e6bbd7281423fe80b07cc0a73985f9469f14b31b88436d4579c916185581df3e5c17eddca52f1124468838
-
SSDEEP
384:prgWyvlE+Ri0KBuhNnmPe1xK0+VfPefAJS8xgm6RS+wA8lwQA:p0NTi0KBoNce1xKRPSAJS7m6YKQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e524cc00f352eea77ac1fbe7064700_JaffaCakes118
Files
-
28e524cc00f352eea77ac1fbe7064700_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f6f6355ccde8cb85b08ecbeae2eb605
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord595
ord598
ord709
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord572
ord685
ord100
ord689
ord610
ord617
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ