Static task
static1
Behavioral task
behavioral1
Sample
65d4bd2546f81310cc9b5ff2fead6ede_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65d4bd2546f81310cc9b5ff2fead6ede_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65d4bd2546f81310cc9b5ff2fead6ede_JaffaCakes118
-
Size
244KB
-
MD5
65d4bd2546f81310cc9b5ff2fead6ede
-
SHA1
772f77344a8f895272793346506ebbed4007fc5f
-
SHA256
42dbb47765f4b6769e7db7df6bc028e41eac9c74a8fea020903a38fc2fe92ca3
-
SHA512
1835be3259fbc7689b043c7d9de232ee93b07bfb78dfeb85e18ac18aa1123b071a6117c5ddc661323621d3fcbe9f9340913a8d9be7845df994e77afb88b1963b
-
SSDEEP
1536:kiGMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6Oy72G/pQ:kiJX0e1FB/DpKjCLHeW2G/pbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d4bd2546f81310cc9b5ff2fead6ede_JaffaCakes118
Files
-
65d4bd2546f81310cc9b5ff2fead6ede_JaffaCakes118.exe windows:4 windows x86 arch:x86
76620cbe5ce210ce23c00ff775771ad5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord628
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
Sections
.text Size: 236KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ