Static task
static1
Behavioral task
behavioral1
Sample
96de389af506ebea750ac36e695d0462_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
96de389af506ebea750ac36e695d0462_JaffaCakes118
-
Size
348KB
-
MD5
96de389af506ebea750ac36e695d0462
-
SHA1
75ccbdd5e41d9c3d7f3c1c096c65a96187892c2f
-
SHA256
7ee1247d0da5f9093d6639a730a208399d5f56882c91d0d6767511498c0b06ce
-
SHA512
febb22d965c2b6af16a3559e4c93a1837aa078141e13c20d29bead09a7e3c1aeb805ccc197477275e9e50ce8ecc2e123b8f7115495d6de2eb97ccabbfd3c7387
-
SSDEEP
6144:jLp31B4mlvq4PPmjQMERrP2hp+mX9qx+7EOEkCO0DXmQ+39ak1tk2u8jM:KA/PesLR7WYufYOhUYta0x7j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96de389af506ebea750ac36e695d0462_JaffaCakes118
Files
-
96de389af506ebea750ac36e695d0462_JaffaCakes118.exe windows:4 windows x86 arch:x86
300d76c240f78af6a0e3ab1ebc1facd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ