Static task
static1
Behavioral task
behavioral1
Sample
4adce83cc27c786627d5c4499115547a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4adce83cc27c786627d5c4499115547a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4adce83cc27c786627d5c4499115547a_JaffaCakes118
-
Size
820KB
-
MD5
4adce83cc27c786627d5c4499115547a
-
SHA1
5cd3ccbb58bdc31c0e93ac97b17747dbeec82380
-
SHA256
97b37f229b852653787b52d5901d9f0dfec06fb3e791855fd2806e2f46d9ee2e
-
SHA512
707e2c292e3187f166a08945bcee1b4a8b4e3a323fe7bf3c9da86a00a8f77be59c3211981f6ef72f481a124de5caadc94c3b6f2a8327aadaeaf3cd5d74dc9b7f
-
SSDEEP
768:h2eEOIqUyozsHbq1tK4WQVvXIX1zwdA+dHi/nLvXIX1zwdA+dHi/nvvXIX1zwdAK:h2SIPyozcEho6pE/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4adce83cc27c786627d5c4499115547a_JaffaCakes118
Files
-
4adce83cc27c786627d5c4499115547a_JaffaCakes118.exe windows:4 windows x86 arch:x86
10a82f2ceb98a7899e7692f43fdbb212
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord593
ord595
ord598
ord520
ord631
EVENT_SINK_AddRef
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ord319
ProcCallEngine
ord578
ord685
ord100
ord320
ord321
ord616
Sections
.text Size: 812KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ