Static task
static1
Behavioral task
behavioral1
Sample
75e59af76fd8e61f7729572a6b6d229c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75e59af76fd8e61f7729572a6b6d229c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75e59af76fd8e61f7729572a6b6d229c_JaffaCakes118
-
Size
24KB
-
MD5
75e59af76fd8e61f7729572a6b6d229c
-
SHA1
a2b343f39cb3da0403e859848a817b2a099a081f
-
SHA256
3d62c2a16d70600422c227d80c71330c10a19fa0901f787a74a181f2dffd19ae
-
SHA512
91f4557de4ccdf7b7654c735265f514182245c9b0b10434bf3828767feea354cfaab195f60f7a502f37d32589b092eb8e59125b98f527c0cdd09ffdfd531977b
-
SSDEEP
192:+pR+Gvywx7OgMVEisbpQhEuM7scyTfjyxtOrgQgtwEjBvPf1jufItepf:Mvog/isbChS3wIH9juMepf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75e59af76fd8e61f7729572a6b6d229c_JaffaCakes118
Files
-
75e59af76fd8e61f7729572a6b6d229c_JaffaCakes118.exe windows:4 windows x86 arch:x86
3accf752917c7298a4eae1a3b0dbce65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ