Static task
static1
Behavioral task
behavioral1
Sample
619ccdc3b0b24f1a7ebbb1af789306ed_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
619ccdc3b0b24f1a7ebbb1af789306ed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
619ccdc3b0b24f1a7ebbb1af789306ed_JaffaCakes118
-
Size
36KB
-
MD5
619ccdc3b0b24f1a7ebbb1af789306ed
-
SHA1
d3d04bf2e9571da1dcbe9009a73e521683b87b87
-
SHA256
535730f17174b7e5635e1aa9bbf6d263c4532e47b5cfc92408265aef200f832a
-
SHA512
56ad90dfc07f4a37f082ab832f19e4787a19110dcf4560e3a74cfddd0abd708ac97fd12c6bb5a6713adf83a410ae1e323f09fdbcde540c0c08d7919530223be9
-
SSDEEP
768:RhcONOY2m/AmS6bn5NLeaKUd/AmS6bn5N:jfomS6bWWdomS6b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 619ccdc3b0b24f1a7ebbb1af789306ed_JaffaCakes118
Files
-
619ccdc3b0b24f1a7ebbb1af789306ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
6450f448be334c6fcf184c086f9a88da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord573
ord578
ord100
ord619
Sections
.���� Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.���� Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.����� Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
����A Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE