Static task
static1
Behavioral task
behavioral1
Sample
2b15983a00d4f32cf6ecb1f8f53f5766_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2b15983a00d4f32cf6ecb1f8f53f5766_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b15983a00d4f32cf6ecb1f8f53f5766_JaffaCakes118
-
Size
20KB
-
MD5
2b15983a00d4f32cf6ecb1f8f53f5766
-
SHA1
78ab65d7d98d8e9bb271c62cf018381d567409ee
-
SHA256
c4a31b9f55ad0b158fadd306e69bc0978ff74aaf5cac6f02ff6e5eb6d27f0346
-
SHA512
9e9f342d050884074c55079938174e49aeefb0a638730c178e544dd96cec95763c739179b58c8808f2356f8468528dc9d3e782e3670a2756b6d158c4a515af2e
-
SSDEEP
192:cNGHf+EpRCli+HlMspZaAADaA+Pe3m+qV0R4r7Luy4HxjnZ6/aYAkcO+unO:cIdAlVDaAvWqV0RW7iNRjnZmO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b15983a00d4f32cf6ecb1f8f53f5766_JaffaCakes118
Files
-
2b15983a00d4f32cf6ecb1f8f53f5766_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7469dcecc98ab3e435c2bd28f1599f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord516
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ