Static task
static1
Behavioral task
behavioral1
Sample
b610dbec7e3ab20d01b76171d35b0830_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b610dbec7e3ab20d01b76171d35b0830_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b610dbec7e3ab20d01b76171d35b0830_JaffaCakes118
-
Size
104KB
-
MD5
b610dbec7e3ab20d01b76171d35b0830
-
SHA1
15ab9fca9dd9af2a610eb49a28842f882d036d6e
-
SHA256
e98d11a291714c49ee8db820ed63736ad1e3b8502e30fa5df53321c2528c8a90
-
SHA512
aa5e2521ab143a2cbb3a821e7dabc0e37082b1c39effd5172bc454736a67249d4644978dcdfd5f74e5dcbc4d0e2d7a0888ee268513c462d83a1031852cab77f2
-
SSDEEP
768:K5JORJlOdg4GCujtJAQYtb6KCvJNdrpgM/M8Mdgc8aGqTvE+LlJ4J/fG1z6KjGyL:D3ePBE6lWZhNUHClQQJEjRzVFRgh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b610dbec7e3ab20d01b76171d35b0830_JaffaCakes118
Files
-
b610dbec7e3ab20d01b76171d35b0830_JaffaCakes118.exe windows:4 windows x86 arch:x86
17baf44f9995c30c586c56703006b10d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord519
ord660
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord609
ProcCallEngine
ord536
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord685
ord100
ord611
ord612
ord616
ord617
ord619
ord546
ord581
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ