Behavioral task
behavioral1
Sample
adbf6985d52278c96195d67a94f79ed5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adbf6985d52278c96195d67a94f79ed5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adbf6985d52278c96195d67a94f79ed5_JaffaCakes118
-
Size
21KB
-
MD5
adbf6985d52278c96195d67a94f79ed5
-
SHA1
a8d585a04b4b6037aa73527cc439dd5fb38918e3
-
SHA256
29541361411b9793ad1b84d66d72084ed1ff5c040fed78e5fae1bf4a056426c7
-
SHA512
e624c30e9e0e13fe1c29347e9684753f842824b5f103af9585777f7ff896dacafcac550b2a6ac6e638811fb455502cfe056bad8e5865566abfc7ce7eb175024b
-
SSDEEP
192:cKUptaA/xseuS6xEe7I5I4GHyKUptaA/xs7Ei:cDpVym617eiSDpVy7Ei
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adbf6985d52278c96195d67a94f79ed5_JaffaCakes118
Files
-
adbf6985d52278c96195d67a94f79ed5_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae3ab401a6d37171d98a4bd8f8bb8991
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
Sections
UPX0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE