Static task
static1
Behavioral task
behavioral1
Sample
4397ad8f732a2878bf12c7e5b0a51255_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4397ad8f732a2878bf12c7e5b0a51255_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4397ad8f732a2878bf12c7e5b0a51255_JaffaCakes118
-
Size
228KB
-
MD5
4397ad8f732a2878bf12c7e5b0a51255
-
SHA1
3144a8a49228e05ddb429bf0a2ff101beabd0bad
-
SHA256
695e3d580e8ee95b596d4844e2216dab36ff2ad802413fdc7225989a5b9d35da
-
SHA512
1e4d6c7186a51c224fba4d9fe3fcce3efb892240b3355934fce3a57a7e4d6b6e4b42e47bb160d23701637c17b49ecac04a7b6048efbd88d082aa14f38f1f4497
-
SSDEEP
3072:dIdcFLEdskgrt05bnwhVh6PTP032TAOpty1RLGKlgkRuN2MQNL:+WjZ0xCVh6qOpY1BGKyk4AMQNL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4397ad8f732a2878bf12c7e5b0a51255_JaffaCakes118
Files
-
4397ad8f732a2878bf12c7e5b0a51255_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc39d6bcccc6aed12cc7b3f6f5003c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tfbqwmk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE