Static task
static1
Behavioral task
behavioral1
Sample
9423a74e1e6dd72e0b74bd70271b194c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9423a74e1e6dd72e0b74bd70271b194c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9423a74e1e6dd72e0b74bd70271b194c_JaffaCakes118
-
Size
24KB
-
MD5
9423a74e1e6dd72e0b74bd70271b194c
-
SHA1
392fd517f909424765ba7a6c56c29f0af14803b1
-
SHA256
22c141abaeae45896ad35880d9412159f33e300c38ebe2ff97677e2bff353913
-
SHA512
e77fb9d52f5e4c4e9a47c1c6b775d14f9db770203ff1ee24885deef74d1bb65cb1867bb6780a7ffbc8d36937592878a71bb36323508dcc5211d211de72a9e06a
-
SSDEEP
192:enGzfDn0TdWzHDJ94DAtP6X4VBZY29rOU3s2p+JE3:Rskd9h6XYZYVUTp6E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9423a74e1e6dd72e0b74bd70271b194c_JaffaCakes118
Files
-
9423a74e1e6dd72e0b74bd70271b194c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8175c9c7b0680d67f8811d13a565c214
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord667
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord645
ord573
ord685
ord100
ord546
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ