Static task
static1
Behavioral task
behavioral1
Sample
426d2d3ed9c736199cb65c9141f006ea_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
426d2d3ed9c736199cb65c9141f006ea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
426d2d3ed9c736199cb65c9141f006ea_JaffaCakes118
-
Size
68KB
-
MD5
426d2d3ed9c736199cb65c9141f006ea
-
SHA1
7b45807552e99700f2fe5bbf7f68cc9c134de35b
-
SHA256
46eccd2bc811f0c981fc9f1a39ea54183c4ddaca74444f586946fa0d74ad27d2
-
SHA512
cae9556d6a35efafc4eae1d465a6da1cb69ab89c5f6d3ba543cc0f1d4a675d58f587851b1657a1a7c0731900669b9aa5dfb7fbcc42671833fe7fd63857fbb1d2
-
SSDEEP
768:HvbzZdyi6rbzZdyil2oGXEXQRZE1/31wDfrKrxDUtiVdCVaeMnRaFCcmwLfpEzpe:PZdcZd3VXQRw/KXQDUtCHwBLfyzdBg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426d2d3ed9c736199cb65c9141f006ea_JaffaCakes118
Files
-
426d2d3ed9c736199cb65c9141f006ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa8ba7153af4a62c902bff9d72cfab63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord595
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord570
ord100
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ