Static task
static1
Behavioral task
behavioral1
Sample
3f61501c3b0aca6c9637dd0c05a90c58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f61501c3b0aca6c9637dd0c05a90c58_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f61501c3b0aca6c9637dd0c05a90c58_JaffaCakes118
-
Size
100KB
-
MD5
3f61501c3b0aca6c9637dd0c05a90c58
-
SHA1
8c6fb635f32d515efcf8d2073ede91aa9ca9fb63
-
SHA256
239b8eb1fbf879e505dad1c8ca76da2529f1a10e0685927f84b476684d04c9fe
-
SHA512
f23fbecd3eea65216b559ad7369eed1f7b44fc161b2df49f8db34db2c6380c6a6bcaf93a17a8c7b64c447a7caa6eda9efe20fde5fb3eb11163298d9679697947
-
SSDEEP
1536:33i6EBXlLOUp5/HNi/Sfsp9NLMXy3i6E1C+HCMeSq363N03WXb9ixCr:ILOUp5/HNi/Sfsp9NLGC+HfemVWG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f61501c3b0aca6c9637dd0c05a90c58_JaffaCakes118
Files
-
3f61501c3b0aca6c9637dd0c05a90c58_JaffaCakes118.exe windows:4 windows x86 arch:x86
7f076f3a1284e8382e0536dbe1729a28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord519
ord595
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord536
ord576
ord100
ord610
ord612
ord616
ord617
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qwzxjvj Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE