Static task
static1
Behavioral task
behavioral1
Sample
37d2096d7dd99029ce0856834799b603_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37d2096d7dd99029ce0856834799b603_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37d2096d7dd99029ce0856834799b603_JaffaCakes118
-
Size
40KB
-
MD5
37d2096d7dd99029ce0856834799b603
-
SHA1
78599966fb819d47f1264c2608fd22afa3194f68
-
SHA256
181568a8836d0fc1658565038e8672466c757f5feb9effe09dd5d009bf9d4425
-
SHA512
e07b1d200d4860f2bde764cf971ac2bdc620feed18952de4b48c44ebd6160d1e4a5d50ce9a33d0b387d496dbc49a430c93ac937f0f53175ff376c17ddb54346a
-
SSDEEP
384:nT61287Ip0oo+2pSr8gmMp/28poLIokwfq7XWYkDB2l3IErQPIz8cZiVWUEOkVsT:T61287I2+cSuMpu8PwTDqP6E/VKOy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37d2096d7dd99029ce0856834799b603_JaffaCakes118
Files
-
37d2096d7dd99029ce0856834799b603_JaffaCakes118.exe windows:4 windows x86 arch:x86
a39604757b0f7d602998edc71a17f26b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord593
ord595
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord681
ord100
ord617
ord619
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ