Static task
static1
Behavioral task
behavioral1
Sample
b6be1d3ce73ab6fe46473a5417602e4c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6be1d3ce73ab6fe46473a5417602e4c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6be1d3ce73ab6fe46473a5417602e4c_JaffaCakes118
-
Size
352KB
-
MD5
b6be1d3ce73ab6fe46473a5417602e4c
-
SHA1
1f6fbe707b06a2b4dda4f185fd608631c05e9dfd
-
SHA256
705e91fde12f30b3322ae3c275dac329d5c41e67e5556432ef4ffd306caf8e7f
-
SHA512
0979afa87550e2243274f2200eaa62873e51eefaafd1ec59c6f0e3cde5e70828ca901b13af2b994c3569a103ac564f8a06870b5dc769996024ecfa3025c71ca9
-
SSDEEP
3072:CojtpmjwgJlBJhyO7D6cdy3+P+kCMT2GUAFxfr2i1oCr8xzKzJMG+UUXv2n/M+m5:IeDKEv2n/M+WJ/04KLF1l2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6be1d3ce73ab6fe46473a5417602e4c_JaffaCakes118
Files
-
b6be1d3ce73ab6fe46473a5417602e4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
d45ffbc214c142fe5b57b23eafc321d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord628
ord665
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord644
ord100
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ