Static task
static1
Behavioral task
behavioral1
Sample
290eeacbaff7770c09c5d40c12cb9b3e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
290eeacbaff7770c09c5d40c12cb9b3e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
290eeacbaff7770c09c5d40c12cb9b3e_JaffaCakes118
-
Size
240KB
-
MD5
290eeacbaff7770c09c5d40c12cb9b3e
-
SHA1
d12781d93c4b0f02933787c9c29b226f6c6e379c
-
SHA256
68e07c2c540b99ef7eeac0ebfcc8a761a111dd8214e6143fada4b0668e7b5fab
-
SHA512
808bd57d0a60ccb4a01de3e942ce56df849294f63540ebc764785021931f9e2d5a5546c8417d9e6d6ce0ee51f5f7f32837be730810ea72d3a50a8d3eeea6255b
-
SSDEEP
6144:L7WNRqBwltEZwjYuYB20YuYB2NtPzp8a:L7eHXEZwM2f2Ga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 290eeacbaff7770c09c5d40c12cb9b3e_JaffaCakes118
Files
-
290eeacbaff7770c09c5d40c12cb9b3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
52ad440929539c94515a7ef2e2538fcf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord626
ord595
ord520
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ProcCallEngine
ord570
ord685
ord100
ord579
ord610
ord612
ord617
ord650
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ