Static task
static1
Behavioral task
behavioral1
Sample
369d2bb6999c93f0911f762de0d6d25e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
369d2bb6999c93f0911f762de0d6d25e_JaffaCakes118
-
Size
352KB
-
MD5
369d2bb6999c93f0911f762de0d6d25e
-
SHA1
c248dbfdf56387fc132dcd2f7b68e32debfed6aa
-
SHA256
84efa3ca82148171230fdb3bdfa24a9c0b3575fdee95be8fd94a95ceefa48378
-
SHA512
902559d4020f46160aa088234f59435e2c4316472fc2bc8b82f9bef8b7f4aac74a480e99c022cf3161c9cf1541fa563513f1fcb7a644e2b658791c848afd9471
-
SSDEEP
6144:0SAygqneg6raCybFzxknXbgZVkJa+i2d5xmZkSjGpJ0/IERku/v:kJqe7r6kcVkgCvSqb0znv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 369d2bb6999c93f0911f762de0d6d25e_JaffaCakes118
Files
-
369d2bb6999c93f0911f762de0d6d25e_JaffaCakes118.exe windows:4 windows x86 arch:x86
0e35164918e68707bca4404029ae3363
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
Zombie_GetTypeInfo
ord595
ord304
ord599
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord606
ord608
ord717
ord319
ProcCallEngine
ord644
ord645
ord572
ord573
ord681
ord578
ord100
ord320
ord321
ord616
ord617
ord650
ord581
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ