Static task
static1
Behavioral task
behavioral1
Sample
2937179450ec99be278b07c105e5019e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2937179450ec99be278b07c105e5019e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2937179450ec99be278b07c105e5019e_JaffaCakes118
-
Size
24KB
-
MD5
2937179450ec99be278b07c105e5019e
-
SHA1
35be10724dca24a72a3a8129a1032704ba24d756
-
SHA256
1a463920b72e7db82eb010aa682939359c390fc1addd1e6e7d4eec901d56c2f4
-
SHA512
26df7e76d1722c176ddb0abaf15baf7a34dd0080d41d481ba5e03b80d635e28e138ab91dd8681f0ce8abc444cf638d6b8940aee42f54eb608f3d830cce145c04
-
SSDEEP
192:QZSAKqlK0+EIfy38TucVssmGHJf8LAWAWl:52l+EIVfltpfA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2937179450ec99be278b07c105e5019e_JaffaCakes118
Files
-
2937179450ec99be278b07c105e5019e_JaffaCakes118.exe windows:4 windows x86 arch:x86
a897d9b5a89d9fee1aed9ac5e504fb33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord517
ord593
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE