Static task
static1
Behavioral task
behavioral1
Sample
a8cf8d53e5f9f0e5b10fd89f446e18c1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8cf8d53e5f9f0e5b10fd89f446e18c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8cf8d53e5f9f0e5b10fd89f446e18c1_JaffaCakes118
-
Size
156KB
-
MD5
a8cf8d53e5f9f0e5b10fd89f446e18c1
-
SHA1
e45648e7a98e9bcbaafbe5e23bbbe5fa252557f1
-
SHA256
6f313001fc2e85f33c10665b8fc6bb749063f8db7a36151f7dbe793119721d7f
-
SHA512
61bfdce0a126c2e5ec5317f2eece5e69592b8abc8a45cad6e51764ece8abce4df7d515b38c1bb291a5817237b6b926e7eba387e32a8d9f724438b8e21b97ddd4
-
SSDEEP
1536:SBW0V3AwDnHZLq6mL5cLP6coqqlaQCZjKqUAExFCa3AvLRMc/6nD:oW0Nn5G6B+CoCvL9/i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8cf8d53e5f9f0e5b10fd89f446e18c1_JaffaCakes118
Files
-
a8cf8d53e5f9f0e5b10fd89f446e18c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d1175ad594084b5cb364856340b33c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord591
ord595
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord685
ord100
ord616
Sections
.dnhdf Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ