Static task
static1
Behavioral task
behavioral1
Sample
2d1d9cf8b5c5d711e9c40b3f7cbeb419_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d1d9cf8b5c5d711e9c40b3f7cbeb419_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d1d9cf8b5c5d711e9c40b3f7cbeb419_JaffaCakes118
-
Size
82KB
-
MD5
2d1d9cf8b5c5d711e9c40b3f7cbeb419
-
SHA1
c71ef653b3ebd0d88caaf26ab05e69741aa657ce
-
SHA256
ec33d246450b65b6ba60d1801caeacba0d09557136509a871ac5cff78dbc429a
-
SHA512
8b2266829f05ed7afebe8f090786966e43849f402d7d8f92d3b9866a4fdff366ec9704f9f6ec6163caf60a92e570b4e6805de07adf168739901451c664281c22
-
SSDEEP
1536:FTqOZbEaI/5PWkbG8w8W1pHDRyIdeRQjS62ugWuogXsRu:fbzS5PrC8wVDRy2XW3dXau
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d1d9cf8b5c5d711e9c40b3f7cbeb419_JaffaCakes118
Files
-
2d1d9cf8b5c5d711e9c40b3f7cbeb419_JaffaCakes118.exe windows:4 windows x86 arch:x86
36f096590959e5bdc2ca1b44ca6293d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord648
ord570
ord573
ord578
ord685
ord100
ord619
ord581
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
���� Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE