Static task
static1
Behavioral task
behavioral1
Sample
970100355ffa43fcaf2d511d372e31ab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
970100355ffa43fcaf2d511d372e31ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
970100355ffa43fcaf2d511d372e31ab_JaffaCakes118
-
Size
60KB
-
MD5
970100355ffa43fcaf2d511d372e31ab
-
SHA1
66038ace2e7beb7ca0c0fde0f27310fe0e0cb5a0
-
SHA256
87ce25a690021d3df3b4a29761f367f147b78dff67734cc1ef7eafaa9b62a2c8
-
SHA512
8ad7cc95b685e0ee595c5d0eced045b790b976c0fac985320274917f60183211562d16511c626081b4f676b49977bee499b6cec299b20ed863d28d31ec13c24e
-
SSDEEP
384:B0uZ1cRYPA+SXqZMj0mqxVCXeDbqeQIv1+neEH9yStzkJyvWKUMcX9RQMSf7m78x:B0uZqR6AtryuO1+lHI61Zi9R9UbW4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 970100355ffa43fcaf2d511d372e31ab_JaffaCakes118
Files
-
970100355ffa43fcaf2d511d372e31ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
58122408e3fa79c250bd3d4f17cc7525
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowsHookExA
GetWindowLongA
UnhookWindowsHookEx
SetWindowLongA
CallWindowProcA
kernel32
GetProcAddress
RtlMoveMemory
GlobalFree
GetModuleHandleA
GetVersionExA
GlobalAlloc
msvbvm60
EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord593
ord594
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord608
ord716
ord319
ProcCallEngine
ord537
ord644
ord570
EVENT_SINK2_AddRef
ord681
ord576
ord578
ord100
ord610
ord320
ord612
ord321
ord616
ord617
ord618
ord619
ord546
ord580
ord581
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ