Static task
static1
Behavioral task
behavioral1
Sample
4888bfa0a546ebbc3242e87e730e50bb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4888bfa0a546ebbc3242e87e730e50bb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4888bfa0a546ebbc3242e87e730e50bb_JaffaCakes118
-
Size
136KB
-
MD5
4888bfa0a546ebbc3242e87e730e50bb
-
SHA1
a09d930244969467a3385e8f6b0a8b38a8f0fd92
-
SHA256
5a77c3e527ed39607db27ce8e03217a4459812183d81c37a7926e55d408234f5
-
SHA512
e02c62bac2c3d950937de8daf6a396f571bddfa88bad2521940bcd1503b31231bd50d029d884d9be1b0fc965def38f41da71dafcd7acf357d6fd2c46cf5378d7
-
SSDEEP
3072:xzGuRMHQ/e/gfWX9gc5S4EO5z5lDSrHkKp75IWmKKmLuMo8LuMb9I+GmT+DESPp6:xz1XfWNgcA4EON5lDSrHkKp75IWmKKmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4888bfa0a546ebbc3242e87e730e50bb_JaffaCakes118
Files
-
4888bfa0a546ebbc3242e87e730e50bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
d045af8d95cfc97cc19d9e80290ad847
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord519
ord660
ord553
ord592
ord595
ord702
ord598
ord599
ord521
ord707
ord631
ord525
EVENT_SINK_AddRef
ord527
ord560
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord534
ProcCallEngine
ord536
ord537
ord570
ord648
ord571
ord578
ord685
ord100
ord616
ord618
ord542
ord650
ord651
ord545
ord652
ord546
ord581
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ