Static task
static1
Behavioral task
behavioral1
Sample
a6fa905344a74b8ebeb0c41f99e417e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6fa905344a74b8ebeb0c41f99e417e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6fa905344a74b8ebeb0c41f99e417e0_JaffaCakes118
-
Size
12KB
-
MD5
a6fa905344a74b8ebeb0c41f99e417e0
-
SHA1
77585acf4ace491b7a96cb399e61125e7759aa97
-
SHA256
369ea9ce656e693cd2180620fa22f54969cc0b8704d204cd79290dbad3da0550
-
SHA512
2731b471f155ccfdc60e6d11fe91a6460e005ab4b4aeeec2129fbca8c54af31863e72ab4b0f8b941082c6e9b960f2df608ce11b85a8e8ea78736f2ac18564357
-
SSDEEP
48:ygmfDfkH7Q+22g/ni/RtFWb2sbCPgUPAxKw3w7BK2:GLfkS2oiXIbRCjPqKjI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6fa905344a74b8ebeb0c41f99e417e0_JaffaCakes118
Files
-
a6fa905344a74b8ebeb0c41f99e417e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
65ac34bea74117a56b509319a2e4b7d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ