Static task
static1
Behavioral task
behavioral1
Sample
4b7a02203231aad5399c3c209f336806_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b7a02203231aad5399c3c209f336806_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b7a02203231aad5399c3c209f336806_JaffaCakes118
-
Size
964KB
-
MD5
4b7a02203231aad5399c3c209f336806
-
SHA1
3742b8b3d892eabc1ef9afb3ab8c96fb94bbb1a4
-
SHA256
0d20b45f089ade8425e1d32f2c40ed84bb25d8d7073919c7a16047a882b90dec
-
SHA512
ada31833f088fa01779c7a9205bfc53dfa1ba9ee3993c28679b92b6db6d1b04868a83a4df276660a3e08b039aacfa3fc887114895e60b0140ac387c2e9de9813
-
SSDEEP
12288:cBCXCc3R4n2DqHiHluBmxeDl3gvhCmJsgt3OWwSbFogDk2W8:cBC92HmxI3gvhCla+WwSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b7a02203231aad5399c3c209f336806_JaffaCakes118
Files
-
4b7a02203231aad5399c3c209f336806_JaffaCakes118.exe windows:4 windows x86 arch:x86
d877f62ff25986f678bf0c9348aea584
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord665
ord598
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord100
ord617
Sections
.text Size: 708KB - Virtual size: 707KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ