Static task
static1
Behavioral task
behavioral1
Sample
413bdb07850857ffb775c31bcf10383e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
413bdb07850857ffb775c31bcf10383e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
413bdb07850857ffb775c31bcf10383e_JaffaCakes118
-
Size
68KB
-
MD5
413bdb07850857ffb775c31bcf10383e
-
SHA1
1db6273534e3ae47e107fd91dc0fa768ac4f1843
-
SHA256
3952db23c7dbab07d19459e638d5c45540428286dffc6f95d26567f138490dce
-
SHA512
7715a758af5a897eaabb01a296074b68e989b12bc5a0ea9d488601619e2e9d50b70f515be1f95c7adf76333a9ac5be66b982e57181a60553d37f7c168dd2377f
-
SSDEEP
768:IjDVszHN4FV7S30TFH2N9/p1cKEyRNMeTabJGblZ98H6a8ppi04g2c8UR8V4NWk1:+DcJEHoJp1cKxUJRsi04g2lI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413bdb07850857ffb775c31bcf10383e_JaffaCakes118
Files
-
413bdb07850857ffb775c31bcf10383e_JaffaCakes118.exe windows:4 windows x86 arch:x86
38aece0731a8ed6fb15c39fce3009fe6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord695
ord696
MethCallEngine
ord516
ord519
ord626
ord666
ord667
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
ord568
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord608
ord716
ord531
ord532
ProcCallEngine
ord644
ord648
ord570
ord681
ord577
ord685
ord578
ord100
ord579
ord616
ord617
ord619
ord546
ord581
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ