Static task
static1
Behavioral task
behavioral1
Sample
3ef8b41e00d6d05e4be4043103b71d51_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ef8b41e00d6d05e4be4043103b71d51_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ef8b41e00d6d05e4be4043103b71d51_JaffaCakes118
-
Size
56KB
-
MD5
3ef8b41e00d6d05e4be4043103b71d51
-
SHA1
52a4d68c72fa52f6893991fbca0a1dcf258271af
-
SHA256
917b6180e61f8dbf29fbc6ac6c1617b1ba302d7a53110043518546765110f05e
-
SHA512
49c1ecefe71254dbb7e2fa16351c09f813fefcd9a091b422460a4ace44d8319ea9572256a806ed0d6a3dbf4d28b8c345e6f66f40e664725616f0703fbf2b5a55
-
SSDEEP
1536:AVsstIWQbWAKxFN1Gt5i4vMKozYO0X3LtVqWM3DBSfs3gArNNxiMiC:AVkANKvC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef8b41e00d6d05e4be4043103b71d51_JaffaCakes118
Files
-
3ef8b41e00d6d05e4be4043103b71d51_JaffaCakes118.exe windows:4 windows x86 arch:x86
c64c9bf8be2afe51790555d0982715cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord665
ord598
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord644
ord100
ord616
ord581
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ