Static task
static1
Behavioral task
behavioral1
Sample
2e633891a52db1f338a94a4ea1b09aff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e633891a52db1f338a94a4ea1b09aff_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e633891a52db1f338a94a4ea1b09aff_JaffaCakes118
-
Size
48KB
-
MD5
2e633891a52db1f338a94a4ea1b09aff
-
SHA1
db854a9d5c7f0bb39e6718afe10bbb98a0855473
-
SHA256
fa33b509f5ca59cf1c79960d9f79b7a5f8447ff4c09d77b0f0347caf9f3328d4
-
SHA512
d43c05a7708e9afd7f5f6b208435fe85b8be0c77200048e086ba142e410f99bf69054d09f6d5f226a047c9f24c77a074f8c26b419a9fa7e261e29eeaf22d03a5
-
SSDEEP
384:J1SHzzmdE/1BPSUU4gL2sNpCCeEE6JIXdIQZmbl89hMD2zWO30t7:ASCBPSKPsDCJHqI9hdiY01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e633891a52db1f338a94a4ea1b09aff_JaffaCakes118
Files
-
2e633891a52db1f338a94a4ea1b09aff_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8fc3d072ab7bbc569f2de4db99537ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord100
ord619
Sections
.NOVO Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HOJE Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VAIV Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ