Static task
static1
Behavioral task
behavioral1
Sample
412a814404d22b9a71e8e5aa813df012_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
412a814404d22b9a71e8e5aa813df012_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
412a814404d22b9a71e8e5aa813df012_JaffaCakes118
-
Size
360KB
-
MD5
412a814404d22b9a71e8e5aa813df012
-
SHA1
254b3be7834746478e80a0c847d7437ca99647d6
-
SHA256
af0a09643764c86b6b22bf920ac282c47b2fa7b0b36b1ea2b4ad19e27c841402
-
SHA512
a90e7c9ccf24b62f21c8077ff1ef6421cca689a8aab32c8a0700f7816149490a9d774840386249da27c760bc630cf73c96f96ff817638b4e1541890cd329ecd8
-
SSDEEP
1536:RNuG72wj63YwgYmv11q3NqUEAt81EFcAvX8Z8a/puerFiw+v5ggMRsua:RL72wj63i//q3YUEAt81Mk3Rr+Ohmx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 412a814404d22b9a71e8e5aa813df012_JaffaCakes118
Files
-
412a814404d22b9a71e8e5aa813df012_JaffaCakes118.exe windows:4 windows x86 arch:x86
62609ce6269c9f7eccc37d0d19a4412e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord558
ord666
ord669
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord573
ord681
ord576
ord578
ord100
ord619
ord581
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xLuOpPx Size: 328KB - Virtual size: 4KB