Static task
static1
Behavioral task
behavioral1
Sample
8d80a5e2cda9cc92288afc1fa97d3696_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8d80a5e2cda9cc92288afc1fa97d3696_JaffaCakes118
-
Size
452KB
-
MD5
8d80a5e2cda9cc92288afc1fa97d3696
-
SHA1
617a125840a39e1353cbc6d9cc51f6e5f0cf27f5
-
SHA256
344549db9b948389380eb13ad7567907e0503a4f396bf490bacc6c381e5cfd67
-
SHA512
11bb7db252fa52d8453f92ebba73d665976f4b6689a3888d84bec6e8a8059db5ecc0185f81e1cdb10ebbd763d8b5401d529361c4e29a753fb4b4a25498f97392
-
SSDEEP
3072:NT8X0e1FB/DpKjCLHAFcQMp3cKAArDZz4N9Ghbk8NEkrbXJAiTNEscKAArDZz4Nl:mpxyN90PEibE4yN90mpXnP31ot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d80a5e2cda9cc92288afc1fa97d3696_JaffaCakes118
Files
-
8d80a5e2cda9cc92288afc1fa97d3696_JaffaCakes118.exe windows:4 windows x86 arch:x86
f33e9349de92270862c0fed95b1fbd60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581
Sections
.text Size: 336KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kxslewy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE