Static task
static1
Behavioral task
behavioral1
Sample
abfcda26e6204b33c1f9f85aceba7dcc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abfcda26e6204b33c1f9f85aceba7dcc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abfcda26e6204b33c1f9f85aceba7dcc_JaffaCakes118
-
Size
24KB
-
MD5
abfcda26e6204b33c1f9f85aceba7dcc
-
SHA1
60100173e020f2bdf9f4bb45bb3e7393fda063ce
-
SHA256
15a10d5a4d7001b53f11e0feaee3e77df7f1d71fe7a4e97bc6903b26a0d57c2e
-
SHA512
880e94e2e7c5b3a9056ccfe335557e36c5da0fa571079b2518d8daa1c6cba95a42de1bd882900f42d007e5d3da000fd0213ec4c8dd11d3a2a8f9e19b69e7837c
-
SSDEEP
192:IeaJUPogKXypo6B3uZbSO1ON6GBodVq0bTWEM:IbGPiXVNBwNYw0bTWEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abfcda26e6204b33c1f9f85aceba7dcc_JaffaCakes118
Files
-
abfcda26e6204b33c1f9f85aceba7dcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
990a1a6a6c178d9ce3b71b9e35e9859d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord626
ord666
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord685
ord578
ord100
ord616
ord617
ord619
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ