Static task
static1
Behavioral task
behavioral1
Sample
67326086dd0afa864f32854a26eb2150_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67326086dd0afa864f32854a26eb2150_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67326086dd0afa864f32854a26eb2150_JaffaCakes118
-
Size
20KB
-
MD5
67326086dd0afa864f32854a26eb2150
-
SHA1
42ce1d747be403de2615b972f14a6e75e20427d2
-
SHA256
87805ce1bb42db09a576bb1fde16630b69b412c621937ad3e2bdcc3073ffb8e0
-
SHA512
21dccf5e957a2922a0564612125e241d160bf457ffb6a04231e6b29ae28b8ae81cb76a4baa4fc4f2fa6f11a6a89bdd095e70321feb26789230dcf2c5957dada8
-
SSDEEP
192:Wr+qEA0SXFte2ZP3y5w3xW5DrRxwcmG9jAz+p:W78KFtfZPi5wotRxwcBjAz+p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67326086dd0afa864f32854a26eb2150_JaffaCakes118
Files
-
67326086dd0afa864f32854a26eb2150_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7ee07123fc1bf0f6726c561d633a548
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord609
ord717
ProcCallEngine
ord644
ord100
ord689
ord617
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ