Static task
static1
Behavioral task
behavioral1
Sample
a63e863e957e5e896b199162d5ab43ec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a63e863e957e5e896b199162d5ab43ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a63e863e957e5e896b199162d5ab43ec_JaffaCakes118
-
Size
124KB
-
MD5
a63e863e957e5e896b199162d5ab43ec
-
SHA1
05d9192ef3e8ae566a5d443277ea604b6b029359
-
SHA256
f6110a032fa4980df7dc31c1edb7e1b471f2faaf17b5b4299f7d7b29fcc378e1
-
SHA512
cd14b9fd62a61b067e6a149dc9adde3edddb58682a235d8b731d447d67236e00004ec72c97c634050609afc26448bf15c604ba0d9650330b76e4c197b64eabf2
-
SSDEEP
1536:lZkewEqquuV8wtWcO4tkkJk77IZ+PBH2yULSpARZVB3:jQEE7L4tkkJG7IZ+P5j8TRZD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a63e863e957e5e896b199162d5ab43ec_JaffaCakes118
Files
-
a63e863e957e5e896b199162d5ab43ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
a615653761a5be5ee75dccc85ff6fb41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord593
ord594
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord572
ord573
ord681
ord578
ord685
ord100
ord616
ord619
ord581
Sections
Bilbao Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Getxo Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Algorta Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ