Static task
static1
Behavioral task
behavioral1
Sample
7086111a956a142efe2a7c6e19f00da1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7086111a956a142efe2a7c6e19f00da1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7086111a956a142efe2a7c6e19f00da1_JaffaCakes118
-
Size
20KB
-
MD5
7086111a956a142efe2a7c6e19f00da1
-
SHA1
5282f5e1f8da6a9cca92a86eec3d105f2f9180be
-
SHA256
6fa5c1776a9ef8957f7574f0d9f4be0ca338c4de0ac1ae9b5adb2419825b96ac
-
SHA512
85df4c4ca6959ffdb27fd486ecfe4a0dacbe1ba6b18aaf8b7b95dd705a0c13ed0dcae7c7b4d83c555e36785db90f31bbd8e3981818ff17a0e7cd2e26ef00bbb1
-
SSDEEP
192:8QM+CkF+qqMWBcLF2lQOnmbSQ7LsixoDcS:8Qqj6WeLF4QYMv7LtpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7086111a956a142efe2a7c6e19f00da1_JaffaCakes118
Files
-
7086111a956a142efe2a7c6e19f00da1_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d9892b8038b68ba19da39687ea7be75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord610
ord617
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ