Static task
static1
Behavioral task
behavioral1
Sample
77dde46de7d784d3e8b408d1a5a11b5a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77dde46de7d784d3e8b408d1a5a11b5a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77dde46de7d784d3e8b408d1a5a11b5a_JaffaCakes118
-
Size
20KB
-
MD5
77dde46de7d784d3e8b408d1a5a11b5a
-
SHA1
ed865117c50d021683f6f6b4724c3fbbb37627ef
-
SHA256
2021f96379a10e278f3b99d1c2b3ce6970b5e9ce4b588b9a81bfc2ddd8d6bd7d
-
SHA512
b2c6694a19a268b21bd5f7259c9cc6f397829a13466ee9ecbaa1c708ad0a896af4de1a79029e1615ccb22160120fe615e2de3488937017cfee2630fa47220853
-
SSDEEP
192:YN5sC3SGh3uF+dfanTRLQMME2b4g9RXwBEKxsXiU24Zh0ZuVXNugqIja3SGh3uF9:isMRMLuEWrUEaE24ZqZACIj0RMLuE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77dde46de7d784d3e8b408d1a5a11b5a_JaffaCakes118
Files
-
77dde46de7d784d3e8b408d1a5a11b5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
54f65f07f3c5110fca96365066215033
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord645
ord100
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ