Static task
static1
Behavioral task
behavioral1
Sample
61289223745bebcfd3c82840f8a6bdf6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61289223745bebcfd3c82840f8a6bdf6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61289223745bebcfd3c82840f8a6bdf6_JaffaCakes118
-
Size
808KB
-
MD5
61289223745bebcfd3c82840f8a6bdf6
-
SHA1
e72204afaea8002b40695b8b62c339b3dd179569
-
SHA256
0209fe3035b3f1f568924dbc0bbb92700a64df7af7a142abbf8172a79a5b5c64
-
SHA512
2c21dcc0ea49629b146261d8ac24592039ebb5573dba33b421ec60d0157e51339104f71a8b4a2d7e777fceb43a836b97e0643a52d4603d04f5c86226ff12dca1
-
SSDEEP
6144:1CU92Uz0td9idwBUsfH8aUoU4JjHt2DmbyLRTaG6F37TG92as9ht72VzCylgWovX:cU4td9idg0OU4bylaQDKhtCV2eIB/6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61289223745bebcfd3c82840f8a6bdf6_JaffaCakes118
Files
-
61289223745bebcfd3c82840f8a6bdf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
fb6a6c0dc7629d09448ed24649b9ef07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618
Sections
.eqwe Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eqwe Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eqwe Size: 744KB - Virtual size: 742KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ