Behavioral task
behavioral1
Sample
399d73ad0e62cdffcfd8ad33e874faf3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
399d73ad0e62cdffcfd8ad33e874faf3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
399d73ad0e62cdffcfd8ad33e874faf3_JaffaCakes118
-
Size
170KB
-
MD5
399d73ad0e62cdffcfd8ad33e874faf3
-
SHA1
1f74588a77ea3a33001a4f334d9a7e3317a3e624
-
SHA256
41a49c2f477dcdc4347bc8c651c85a6b238c45771f4c9416b7d847116d854ede
-
SHA512
522f07b09934cc121b5f6674bba04eab02ae7f92faa2dd158792ef5eb4f5ba1a86f05fd421696ac9e2f405b6c66b70a0d9aa7f5bc0c74baba1e512d82ebc002d
-
SSDEEP
3072:EIBuLjJMjjIiPdIuG8UvahsdcYX3UI2EuJ3im/ZCdady+RlTp/VYq63+sU:EuuvJEdPBUyhsdEI2++M+RlTHYW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399d73ad0e62cdffcfd8ad33e874faf3_JaffaCakes118
Files
-
399d73ad0e62cdffcfd8ad33e874faf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
20bc78fd01505d5fd0d28d26f822efa0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE