Static task
static1
Behavioral task
behavioral1
Sample
47469252fe87c6972348c5a74287f379_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47469252fe87c6972348c5a74287f379_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47469252fe87c6972348c5a74287f379_JaffaCakes118
-
Size
89KB
-
MD5
47469252fe87c6972348c5a74287f379
-
SHA1
fbb78b20256830143bb8895952598b77dfc890ca
-
SHA256
d023b603d23e7adf78dd9cf531355349d2994bde94da5ea8954be297d6a5926c
-
SHA512
6e80389b950899b2dbd2fe87668a078eccbc6cda79fd4ad9975cf9d3176714fcb16c3e7e0693bb8eb2d03ef4d894eec8cd5fc4db9f15fc5f8f036f597869ff5f
-
SSDEEP
1536:5wPovIYFnJ4N/Lo6SnCyZdOxGYklHIOSmTA5jigd20sFI:5wPoQYFn+/SnCyZdOxPktIcOzdOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47469252fe87c6972348c5a74287f379_JaffaCakes118
Files
-
47469252fe87c6972348c5a74287f379_JaffaCakes118.exe windows:4 windows x86 arch:x86
20da04889d56cd85f66a5a521e4a08d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord681
ord685
ord100
ord616
Sections
Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE