Static task
static1
Behavioral task
behavioral1
Sample
6569dde371c3edf0c2473e7b8bedd93d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6569dde371c3edf0c2473e7b8bedd93d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6569dde371c3edf0c2473e7b8bedd93d_JaffaCakes118
-
Size
252KB
-
MD5
6569dde371c3edf0c2473e7b8bedd93d
-
SHA1
c756020c8e02837d915a45e2268d0580cb395f6b
-
SHA256
55dcc018304a7aada02ba07b29099d0fc64c070d50fd59cda02e18ff8931acd7
-
SHA512
a06fa85785464993270ce22eba55e92579f2366d3edab56d6c71e22bda1f8a418eed754b6b428ff2222a59217ebd8e18cc1fab742678f8e5b96323c1ae90b605
-
SSDEEP
6144:BvxjZQw74iS7hWP1kjmoHjzW+kEiN4Q5t:BvxjZQw74iSbjmoDzFhSDt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6569dde371c3edf0c2473e7b8bedd93d_JaffaCakes118
Files
-
6569dde371c3edf0c2473e7b8bedd93d_JaffaCakes118.exe windows:4 windows x86 arch:x86
35790ae3444c93b9c33af059ad9aaac0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ