Static task
static1
Behavioral task
behavioral1
Sample
a1519c34ce15b87135d296fc99e13f52_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a1519c34ce15b87135d296fc99e13f52_JaffaCakes118
-
Size
52KB
-
MD5
a1519c34ce15b87135d296fc99e13f52
-
SHA1
ab7bc3181096c46aa236d17058e09442b57faca0
-
SHA256
5018bc469ba43b80da9fd66e54be15d66585b2b3809524f2d8317a5979952c00
-
SHA512
8d90e905f9149a03a3cd7dc30874db73406ccca2f15ac01a2c41eeb9166f1e1d1e4a3b4d29684e2d67199426fecbc741b602101fa16067f3ae4163018fb32ff5
-
SSDEEP
768:e8BWhOJdF2mCV69MT7osPWa4pAU8e5cQfZrnd+2L7:RJdF5K69+U3anU8McQr+k7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1519c34ce15b87135d296fc99e13f52_JaffaCakes118
Files
-
a1519c34ce15b87135d296fc99e13f52_JaffaCakes118.exe windows:4 windows x86 arch:x86
f21542efc22a76d3dc80f89f17b24fb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord573
ord685
ord100
ord616
ord617
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ