Static task
static1
Behavioral task
behavioral1
Sample
354d5c3704f1ed0c57a0484b57bd1e16_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
354d5c3704f1ed0c57a0484b57bd1e16_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
354d5c3704f1ed0c57a0484b57bd1e16_JaffaCakes118
-
Size
20KB
-
MD5
354d5c3704f1ed0c57a0484b57bd1e16
-
SHA1
055b51f1e6ec42801781cdd7eb545269d2fb3f15
-
SHA256
6ebe452a1132b751ad037888f01078757a8ddea3b04173cca0d9dbcf9039ba2b
-
SHA512
30bd93a16c15eb950ed1214681878296c1b57e4f9e5bd30b6815825b060df1155451f470e4ccac3eba9bbc3135d476cf4e5f50b03d873eef4882cf0907b5eb53
-
SSDEEP
192:wMI+G2hVL3j9Tp9E8CZy4boOBp3MoABcdt53evMdu:PR3j7uooABcdthequ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 354d5c3704f1ed0c57a0484b57bd1e16_JaffaCakes118
Files
-
354d5c3704f1ed0c57a0484b57bd1e16_JaffaCakes118.exe windows:4 windows x86 arch:x86
0ccaac8dbba1f677520ac550641ff85e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord537
ord648
ord576
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ