Static task
static1
Behavioral task
behavioral1
Sample
b2a332827d1e23d018ee92372950f8d7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b2a332827d1e23d018ee92372950f8d7_JaffaCakes118
-
Size
608KB
-
MD5
b2a332827d1e23d018ee92372950f8d7
-
SHA1
c1abc3032ef5938bc97d2185c05b59cad3546044
-
SHA256
0fdf756bc4e7a4cf71498d429a2aa46c8c759511cb147d652df66144f958f382
-
SHA512
87fd1195b0efbf724204551bcbabaa25cd87ad419ab58d24bb7affabb7a3ff6a3d146c0c629e435fae7f75541fadf31218d3b2532919d2a8e492c3e4fe8eba0f
-
SSDEEP
3072:LsX0khKL1x5DRsVe1PbyPd0zHad8+Jclxvd:4Xe1jIWPMoai+JK1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2a332827d1e23d018ee92372950f8d7_JaffaCakes118
Files
-
b2a332827d1e23d018ee92372950f8d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
de8e6c59f3f24213df22178c31ee543d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
ord696
MethCallEngine
ord626
ord628
ord665
ord666
ord631
ord526
EVENT_SINK_AddRef
ord528
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ProcCallEngine
ord644
ord537
ord572
ord100
ord617
ord581
Sections
0 Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE