Static task
static1
Behavioral task
behavioral1
Sample
a06c75469f1110ad6a0a21016ed9b42b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a06c75469f1110ad6a0a21016ed9b42b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a06c75469f1110ad6a0a21016ed9b42b_JaffaCakes118
-
Size
60KB
-
MD5
a06c75469f1110ad6a0a21016ed9b42b
-
SHA1
9ad296bc2968c4c424821fc83b64d7b32f24e047
-
SHA256
ced737bed9aaa46614288c8d1906d07316d8f69440a18817065d8fede0a6601e
-
SHA512
17e5d07322df6f7d458f2d5105f66852cb5e79f7e1f080d59f10e357cf190ef6fe24332fd6580ee72f81a4e54221fbb1a7467802d4d22d57026e0913452b6113
-
SSDEEP
768:PQ/kqbeHkd0kBmbdSUMDWdUkDTFFIkNc8FIkid+W9KOUJ/rgYn6IR4hspB6W8LxH:GElbHb/VBkSeOB0NME6XtFIEw/R2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a06c75469f1110ad6a0a21016ed9b42b_JaffaCakes118
Files
-
a06c75469f1110ad6a0a21016ed9b42b_JaffaCakes118.exe windows:4 windows x86 arch:x86
184bae34cec7721822b9682e22f6cafe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord584
ord187
ord696
MethCallEngine
ord517
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord614
ord431
ord617
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ