Static task
static1
Behavioral task
behavioral1
Sample
a7fc55173913af7a43e0a474042d322a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7fc55173913af7a43e0a474042d322a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7fc55173913af7a43e0a474042d322a_JaffaCakes118
-
Size
176KB
-
MD5
a7fc55173913af7a43e0a474042d322a
-
SHA1
bb885c986e53ecd67c108b700d13c30654b40815
-
SHA256
5ea136748898a6fe6f5b3c46c3d9c084dddddb35b45c1891f9fbcad74425c2b2
-
SHA512
3b733ffe46ec572202044b6410d4ccaf26d80d49517cd803eb8959d795f2dcd9d749768237da8d833516d1bdaad8eb9424472f9ab978f77c7188f2447db5cb9f
-
SSDEEP
1536:cIdcFLZp0dsrYgdRAgH0/m38wIJVOy2JDVhCK8PTSuBXky62TA9finab:cIdcFLEdskgrt05bnwhVh6PTP032TAO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7fc55173913af7a43e0a474042d322a_JaffaCakes118
Files
-
a7fc55173913af7a43e0a474042d322a_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc39d6bcccc6aed12cc7b3f6f5003c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE