Static task
static1
Behavioral task
behavioral1
Sample
496e5b8440e2f62342617b67390f8f3e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
496e5b8440e2f62342617b67390f8f3e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
496e5b8440e2f62342617b67390f8f3e_JaffaCakes118
-
Size
164KB
-
MD5
496e5b8440e2f62342617b67390f8f3e
-
SHA1
83c34936794ae459a0a265011806d639c9bbe23d
-
SHA256
5a30702576ec18147979c3cfb76d75abbe2ea4c23e12c57e0c639aac049bca77
-
SHA512
6c72acc4ca4617e82a536a838e273c3a4ebb598527f9c2da3f001b2975f687844920d17efb322101b412bb263d29a10167c64cd3507408ccb92981c7cb0fa31d
-
SSDEEP
3072:Xhabxqb2zgxH8X8UbmMH28mAA3kX3rwGqMamEFkucP4q2cHSDVFm:XhqGJWWuskXEGDbucP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 496e5b8440e2f62342617b67390f8f3e_JaffaCakes118
Files
-
496e5b8440e2f62342617b67390f8f3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
38c7520b641c3f5d5aea562407ba4b69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord573
ord681
ord100
ord617
ord619
ord581
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ