Static task
static1
Behavioral task
behavioral1
Sample
69b7db73444c7726dfcdc046a39763b2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69b7db73444c7726dfcdc046a39763b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69b7db73444c7726dfcdc046a39763b2_JaffaCakes118
-
Size
920KB
-
MD5
69b7db73444c7726dfcdc046a39763b2
-
SHA1
35b0f4a107960fafd8751e425ec1a9729d83d9f7
-
SHA256
2c4559f958b55e46914f040a261ba451431c05103934901b7987b96068a72247
-
SHA512
fe99366779360769eccd1cc13dd958f9cc3d32c40c269253fdcfebdce8d2d989762b6b2bf444cafd32c7c6c032ea6e957f72002ad13d9b064b90320d2b782b8a
-
SSDEEP
3072:Fyec4tcxETPL5tgnlvgZMbVHdf8/VnLM8FWujPdkUWyN1auF+jlzQZ48t5OOT0nz:HCOj5aU0yi++jlcSnWMRa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69b7db73444c7726dfcdc046a39763b2_JaffaCakes118
Files
-
69b7db73444c7726dfcdc046a39763b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b652661d5598e2ac65be0fb4b85eb99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord519
ord662
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord714
ord608
ord717
ProcCallEngine
ord537
ord647
ord571
ord572
ord573
ord681
ord100
ord612
ord617
ord619
ord546
ord581
Sections
.text Size: 912KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ