Static task
static1
Behavioral task
behavioral1
Sample
6448cbbd096aabe7257076f22af18f1b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6448cbbd096aabe7257076f22af18f1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6448cbbd096aabe7257076f22af18f1b_JaffaCakes118
-
Size
220KB
-
MD5
6448cbbd096aabe7257076f22af18f1b
-
SHA1
926ee3ec5259a577e08b34f7defdbd2446fdf7e0
-
SHA256
55d18b6be2f1f0a0f7299ed51a805ad634969e8e928f252afae5afa7188987a7
-
SHA512
55e24864e9c04074910a84be21c6b69dd422c3d35b654544fdbfa4068a362acbc6118dae735bd361964cbf09f6a37c7ad27cb48d5fad496c971ffda71bc7247c
-
SSDEEP
3072:rVAWtxCHix+o3iKRGHO3VAc9cnMgVB4Ps:e4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6448cbbd096aabe7257076f22af18f1b_JaffaCakes118
Files
-
6448cbbd096aabe7257076f22af18f1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7cdfa2ccf891bc86d62f7a44415fa1cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord584
ord516
ord517
ord660
ord593
ord594
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
Zombie_AddRef
ord573
ord100
ord616
ord617
ord618
ord546
ord581
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE