Static task
static1
Behavioral task
behavioral1
Sample
348e3cbd92890e603ec3dcf90e5b592f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
348e3cbd92890e603ec3dcf90e5b592f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
348e3cbd92890e603ec3dcf90e5b592f_JaffaCakes118
-
Size
40KB
-
MD5
348e3cbd92890e603ec3dcf90e5b592f
-
SHA1
806e91f879f3dcf89980c626ffb450b978266da2
-
SHA256
192d3b692265cad59a379d840bc08002ac0d0f835d9094ecd7ca9f09b61a50c7
-
SHA512
a44770ba77b0115f3129d7eff0a4014f3751de4f133757c731f62cd98058a60fcfa3fffa278d0b0c8c65877dc2c8a14c7032c742c0349dff2833b3121a82d1eb
-
SSDEEP
384:3vnySe5hOpk65bdvG1wJLZX5XHi2UU76dl7NkIPondMPSCIE51l+ZnrWEb0Q+6Dq:A5mksqMXjCNgnWPSPAFYBw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 348e3cbd92890e603ec3dcf90e5b592f_JaffaCakes118
Files
-
348e3cbd92890e603ec3dcf90e5b592f_JaffaCakes118.exe windows:4 windows x86 arch:x86
18c9e1026f21d0ecf58acc562a895de5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord666
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord531
ord717
ProcCallEngine
ord645
ord648
ord681
ord578
ord100
ord579
ord617
ord619
ord581
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ