Static task
static1
Behavioral task
behavioral1
Sample
4ca15f54b09b63a889f300e70ffa0c87_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ca15f54b09b63a889f300e70ffa0c87_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ca15f54b09b63a889f300e70ffa0c87_JaffaCakes118
-
Size
52KB
-
MD5
4ca15f54b09b63a889f300e70ffa0c87
-
SHA1
7add040c14efbbb1459941507706e9daf40f2ced
-
SHA256
5dd075ca0646057ccf21bf9790aa6ed7e34563291012133975d4d1bc6691e8b9
-
SHA512
4ead406cec0a8089e3aa248475816d96ed0e07e8fc20dc584f75c5bf8ba90b3d93861a620c12efa4e63a765d556d9e1d3cc7567c3c9efdc71fd76b277b8a510d
-
SSDEEP
384:aMdiIIuA2rjBSMcYSALPWR2QeLNW9L2sJr6gd34q3lCEsOigD5HBl6uIKdZPG0:5Eu5BSM5BLPAXdYEsOiUhPIEZPG0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ca15f54b09b63a889f300e70ffa0c87_JaffaCakes118
Files
-
4ca15f54b09b63a889f300e70ffa0c87_JaffaCakes118.exe windows:4 windows x86 arch:x86
b249e6d9a63e99b87361f7478cb46b65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
ord698
MethCallEngine
ord628
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord644
ord100
ord619
Sections
. Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ