Static task
static1
Behavioral task
behavioral1
Sample
b2a2e4dd381e8956c480188bc2ef8606_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b2a2e4dd381e8956c480188bc2ef8606_JaffaCakes118
-
Size
348KB
-
MD5
b2a2e4dd381e8956c480188bc2ef8606
-
SHA1
1f2d425a5bca34ffda60207103ff163748af9b9c
-
SHA256
af44769fe39b9f32bb761ee5a7b4975be72e76982d5e1b0254c590317974b8db
-
SHA512
b78296e2f141c259184ae67c81de250293bbcb788534e4f4de5c7d8b20c3dbdaeb3090abe4b1ab51b550184ba2284d8b976d4d481513967811440ac6942dcc45
-
SSDEEP
6144:1Q8Od3XP2KTzHnW664O2nRXojuBIVhdDL7xha+i2rl2F7K01V6bH+6V:yYiBWhdbxhaB2Z2ki4S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2a2e4dd381e8956c480188bc2ef8606_JaffaCakes118
Files
-
b2a2e4dd381e8956c480188bc2ef8606_JaffaCakes118.exe windows:4 windows x86 arch:x86
a096c853cd97fa5880145cfe6c985ecc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord666
ord595
ord631
ord525
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord617
ord581
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ