Static task
static1
Behavioral task
behavioral1
Sample
b9bfacb94f39c62bc53734ff38a1a92b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9bfacb94f39c62bc53734ff38a1a92b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9bfacb94f39c62bc53734ff38a1a92b_JaffaCakes118
-
Size
28KB
-
MD5
b9bfacb94f39c62bc53734ff38a1a92b
-
SHA1
1fda6e90dd0a0877b0558f4fba4354d8fc5b3f50
-
SHA256
6535b6bd7a3f60cdb7967ae94dcffd2c214774e24c5aae884ec90ac39249b4e4
-
SHA512
c9cf16bd7d1514232d39bf450f4b0ec695dd6c5170329e4bab5323a977540eb4744c0ecf316f35cda727bbdb76f43236e1a5d9b001d4072016d06c4d5e4468f2
-
SSDEEP
192:Y+PzTN/TT/+EbNC2ImDISKv1Uf0sBrWR8Dvj2PsXmg1iJl91F8KXMdrFIASrTuWd:Y+82qMp9IAks6Mvvpy6UvOc1NlIje1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9bfacb94f39c62bc53734ff38a1a92b_JaffaCakes118
Files
-
b9bfacb94f39c62bc53734ff38a1a92b_JaffaCakes118.exe windows:4 windows x86 arch:x86
0471d9f3d9f142373524705d6a5cb951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ