Static task
static1
Behavioral task
behavioral1
Sample
6ee48068d5fd8eb7a094b4028397418a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ee48068d5fd8eb7a094b4028397418a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ee48068d5fd8eb7a094b4028397418a_JaffaCakes118
-
Size
24KB
-
MD5
6ee48068d5fd8eb7a094b4028397418a
-
SHA1
5bb5097071364455645e609a833d7b484a8df58b
-
SHA256
9aa6d1c115cc628c052b6a263babb0e5adbd5cf9ed0a9a62267612d1e63bcd52
-
SHA512
11fd42f5c737ccde5594d5743b990ae9ce289f5d3423ba4f31fcad10e24124d3e8fe71a3720ae46e40c242b6c6086b920a737630d30a4da634eb68f73c99f281
-
SSDEEP
192:/jD3koxYvTzfbKGq+AUeJuSyhzgbbr8e4k9V3pGiLZbE+yRya07GSG2oWhzguWRk:/4zU+Xq9MzgZPyRyaUGSG2oAzguWRWxx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ee48068d5fd8eb7a094b4028397418a_JaffaCakes118
Files
-
6ee48068d5fd8eb7a094b4028397418a_JaffaCakes118.exe windows:4 windows x86 arch:x86
6265d2433ccc0d741e9a01195d046701
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord593
ord594
ord598
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ