Static task
static1
Behavioral task
behavioral1
Sample
ae0f94811c0df27916022283a8e2f544_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ae0f94811c0df27916022283a8e2f544_JaffaCakes118
-
Size
244KB
-
MD5
ae0f94811c0df27916022283a8e2f544
-
SHA1
c63cfd8340c728d67a6eb4c0a045e2f89cf2b877
-
SHA256
48e98f33d4449201d1c3f19e8973bb3e480121c88990ab87ee9b277432559d6c
-
SHA512
a831c969f132c88feda73b6b9be722bdc4dcb3ef0c527c517805ef8a8237d5c93284d5eaa17c812589f80c015f784bcc71600416c78ae10791bb564c7d2c632e
-
SSDEEP
3072:wKloQSrkKgRENEI5apGTwQqVMTW0hiJDeaXn1aj6:j1t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae0f94811c0df27916022283a8e2f544_JaffaCakes118
Files
-
ae0f94811c0df27916022283a8e2f544_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbcca0075fb998c2843b6b50e9acec51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord626
ord628
ord665
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord681
ord100
ord617
ord581
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.YJPQo Size: 4KB - Virtual size: 4KB
.NeTQO Size: 4KB - Virtual size: 4KB
.Qvtb Size: 4KB - Virtual size: 4KB
.Duly Size: 4KB - Virtual size: 4KB
.rrffF Size: 4KB - Virtual size: 4KB
.bDQCa Size: 4KB - Virtual size: 4KB
.xmjd Size: 4KB - Virtual size: 4KB
.sOyJ Size: 4KB - Virtual size: 4KB
.LQopK Size: 4KB - Virtual size: 4KB
.VtaDT Size: 4KB - Virtual size: 4KB
.GaiQC Size: 4KB - Virtual size: 4KB
.RQUGz Size: 4KB - Virtual size: 4KB
.lLxMQ Size: 4KB - Virtual size: 4KB
.LkNsc Size: 4KB - Virtual size: 4KB
.MhQNc Size: 4KB - Virtual size: 4KB
.UUHu Size: 4KB - Virtual size: 4KB
.lyMtL Size: 4KB - Virtual size: 4KB
.BbOM Size: 4KB - Virtual size: 4KB
.ZVsOn Size: 4KB - Virtual size: 4KB
.pADS Size: 4KB - Virtual size: 4KB