Static task
static1
Behavioral task
behavioral1
Sample
890a69bbd3bc119a853ed5202be98d08_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
890a69bbd3bc119a853ed5202be98d08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
890a69bbd3bc119a853ed5202be98d08_JaffaCakes118
-
Size
524KB
-
MD5
890a69bbd3bc119a853ed5202be98d08
-
SHA1
dce8646a48c3e4c441024b524197017db3efe9c5
-
SHA256
97a6c7e975ae6462ad73e76846b4fcf66c7fd38a30b51939a6b8f7bf8b0ad6d2
-
SHA512
543ebadf06caca835ca40882b718dbf99e5190b2a5adecf18c4f319bfbc7b05beaeb41f43b5fa70e261be02d7806a869520fd43b30a806fdc5b3b26bd1b312c8
-
SSDEEP
6144:atmFCDimSR6YJ7EfX6Rn469n1gVjfOYKvlkZN:YDDeJb4hIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 890a69bbd3bc119a853ed5202be98d08_JaffaCakes118
Files
-
890a69bbd3bc119a853ed5202be98d08_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c72c752998e63eb6e8da6a9bd5302e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SystemParametersInfoA
msvbvm60
ord696
ord698
MethCallEngine
ord516
ord517
ord518
ord519
ord666
ord667
ord593
ord594
ord595
ord596
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord531
ord716
ord717
ProcCallEngine
ord644
ord572
ord681
ord576
ord685
ord100
ord610
ord616
ord618
ord619
ord580
Sections
.text Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB