Static task
static1
Behavioral task
behavioral1
Sample
bc7e91e44604a3439018ca745cfeea8e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc7e91e44604a3439018ca745cfeea8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc7e91e44604a3439018ca745cfeea8e_JaffaCakes118
-
Size
44KB
-
MD5
bc7e91e44604a3439018ca745cfeea8e
-
SHA1
8d89aa60bcb9a4eb384882743bcd0fbea8f8a670
-
SHA256
e15cfec5c2cd3b734e6077279e04d82d001205ed0aae59a486293a99bf69cc0c
-
SHA512
4d9fc0673a2c54643d3788664d84bee267fc08489c92c3b41d773587cfc318014b83fc8a70b364d416b13712bccef7e49809132e1f928e412a86a68874b72be4
-
SSDEEP
768:+8uyaEIy9BnmBeQTmYOYUqtI2FYC+L7JlI4N5Z:+8Xu9T6YOYUYfFYprIiZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc7e91e44604a3439018ca745cfeea8e_JaffaCakes118
Files
-
bc7e91e44604a3439018ca745cfeea8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
ecfd79d43c0ba512500c7564956afbda
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord572
ord685
ord100
ord616
ord618
ord581
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ