Static task
static1
Behavioral task
behavioral1
Sample
64248f7c7ea12fc5525a08bbe5f627d7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
64248f7c7ea12fc5525a08bbe5f627d7_JaffaCakes118
-
Size
140KB
-
MD5
64248f7c7ea12fc5525a08bbe5f627d7
-
SHA1
bdfc0a38ddf162c16632b8cfb85f3e83ed448ee3
-
SHA256
07a7d9229d5abf6dbfe3e60fbb1b7f025c4f23a175fe6e13959dd60b2957a8be
-
SHA512
91ab8040d2b828d41e34e279c5dafcda02005ea16d11d3059ea2d42093a0a72611aac7928c80f5088fa4493717f6868a74a7f3632b79522663aa527a1098acbd
-
SSDEEP
3072:U5PDykjC8g2hypK7D6zd23+P+kdMT9ORr:e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64248f7c7ea12fc5525a08bbe5f627d7_JaffaCakes118
Files
-
64248f7c7ea12fc5525a08bbe5f627d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e7e1bb046c4c6d3ca42779bf040aa77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord626
ord628
ord666
ord631
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord572
ord100
ord617
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ