Static task
static1
Behavioral task
behavioral1
Sample
4902b7e8755563af15485fd5b77365ca_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4902b7e8755563af15485fd5b77365ca_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4902b7e8755563af15485fd5b77365ca_JaffaCakes118
-
Size
72KB
-
MD5
4902b7e8755563af15485fd5b77365ca
-
SHA1
750601a6e8f87f9b8990878d5632761afb14392f
-
SHA256
f31573cb2bcd62375ef8043fd4d0107cb94cc958b2b0aa1a0eba70516abf7bdd
-
SHA512
9ff6c8a866e92a8addc39e7852ad35fc81b294ae17ac85891b738ca7cf6ba8e53d5ac0223f29e3d8103893965cb08426aeeb966f40a0b7bf44fa8ab9e036deec
-
SSDEEP
1536:43i6EBXlLOUp5/HNi/SZKWcb+sp9NLMXy3i6EP:fLOUp5/HNi/SQ5Csp9NLa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4902b7e8755563af15485fd5b77365ca_JaffaCakes118
Files
-
4902b7e8755563af15485fd5b77365ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
7f076f3a1284e8382e0536dbe1729a28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord519
ord595
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord536
ord576
ord100
ord610
ord612
ord616
ord617
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE