Static task
static1
Behavioral task
behavioral1
Sample
711bfb4730110e5749461ca10c8147d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
711bfb4730110e5749461ca10c8147d5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
711bfb4730110e5749461ca10c8147d5_JaffaCakes118
-
Size
304KB
-
MD5
711bfb4730110e5749461ca10c8147d5
-
SHA1
5565e1bf182d921ae4d9b3374cdfd53b933405f4
-
SHA256
b44a9c8a9150ef357701d67a4509852ab87fe2b9a4105b64341eee408d5a7aee
-
SHA512
22494f5cf114a465b9f8ed1a888bc221914d89fbfb1c6580cc5aeb36e0fbb54bf1e4c7500c976ad698745bb8045228a2c00ba3150b35884bd420ade6770ffcf5
-
SSDEEP
3072:Vuktn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4Ec:qY9f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 711bfb4730110e5749461ca10c8147d5_JaffaCakes118
Files
-
711bfb4730110e5749461ca10c8147d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
e367aa35032b1a9bd813bc148613214f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord597
ord599
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord572
ord100
ord616
Sections
pec1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE