Static task
static1
Behavioral task
behavioral1
Sample
a5e3a18a3cbecc0bfca0c4f2bd55a126_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a5e3a18a3cbecc0bfca0c4f2bd55a126_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5e3a18a3cbecc0bfca0c4f2bd55a126_JaffaCakes118
-
Size
216KB
-
MD5
a5e3a18a3cbecc0bfca0c4f2bd55a126
-
SHA1
5bb80daf14322c40e2a28bbf4e221d09292cf4ee
-
SHA256
9914daedeb8285e7571ce815ad41955db7235a11be69888ff31c451cfd924061
-
SHA512
edff3d0694c5244f485a3e29bcc9e4f0666f57e64139b49033962c9a95e99219ba11699f7e35ffed16b58d5bdece12e31947ce36467b6193141830c8b1902046
-
SSDEEP
3072:Y+UgwuDaJQpTTajMWXeMrlI9B3CyiwB6jDWTvExZXDGHIKTbrWuCzV8NMPVRSern:Y+Lo5jMWV5IT3CizwXDLKTGusCMPVj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5e3a18a3cbecc0bfca0c4f2bd55a126_JaffaCakes118
Files
-
a5e3a18a3cbecc0bfca0c4f2bd55a126_JaffaCakes118.exe windows:4 windows x86 arch:x86
e12e5a5d6f68b0cff7155e9dab36db26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord660
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord685
ord100
ord546
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ