Static task
static1
Behavioral task
behavioral1
Sample
2fb2f942db79b98bb17a9ab2100d0978_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2fb2f942db79b98bb17a9ab2100d0978_JaffaCakes118
-
Size
312KB
-
MD5
2fb2f942db79b98bb17a9ab2100d0978
-
SHA1
f1ea344983920d480a95ac21e915497ccf0f2e3e
-
SHA256
0dcce56424767342c5e70337ead21295deb32dfe37c0c7bc92b0243bc13992c1
-
SHA512
469ea67cd157c68f69ee5d7962644f282950152e4e3dcec25f312dac6e11035382232303c3d45ed65a2cf6df6738edb9d671356d9b3073f86d827a6e73f68287
-
SSDEEP
6144:8u0u9sTcjsaBU73O0tMWjJqrYXYeL0Q8F1iD3LGIHG9AeFq9:8ZkscZBU7F/Jqf08+D3yq2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb2f942db79b98bb17a9ab2100d0978_JaffaCakes118
Files
-
2fb2f942db79b98bb17a9ab2100d0978_JaffaCakes118.exe windows:4 windows x86 arch:x86
6450f448be334c6fcf184c086f9a88da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord573
ord578
ord100
ord619
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc_ Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
����a Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE