Static task
static1
Behavioral task
behavioral1
Sample
4057f7c3b29cc1690396e555c0245e22_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4057f7c3b29cc1690396e555c0245e22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4057f7c3b29cc1690396e555c0245e22_JaffaCakes118
-
Size
160KB
-
MD5
4057f7c3b29cc1690396e555c0245e22
-
SHA1
c4f01b94206f513c204e8a581a741452d031ccb7
-
SHA256
f6cd42fb87f1d99d01a259b9d09675f2509af47407c40c93a9e9f5afcc8e5c12
-
SHA512
5c3eb7ca219f3d18a8c28bc96b63242a3d3e3165e0f9a739200d2ddb7d00a3e4159ec6ddb3dcf1435b4363ccc8ad88abd4d961b748ff10ba64068180b81d402d
-
SSDEEP
3072:KJCDm4p95j5vJS7f2LkiCXl5/MMzu//ZaGDWH:F591rgxu/xzDa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4057f7c3b29cc1690396e555c0245e22_JaffaCakes118
Files
-
4057f7c3b29cc1690396e555c0245e22_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea23fc29d95be057d4e7c6b77d74a60d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord535
ord645
ord570
ord571
ord576
ord100
ord617
ord581
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xaihngz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE