Static task
static1
Behavioral task
behavioral1
Sample
becb299122dd8f6aae1dab0b0061259a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
becb299122dd8f6aae1dab0b0061259a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
becb299122dd8f6aae1dab0b0061259a_JaffaCakes118
-
Size
16KB
-
MD5
becb299122dd8f6aae1dab0b0061259a
-
SHA1
0586a5c97eb5abeb7a7a648800d1d7ac67e8b0b5
-
SHA256
334a72033c2b7e9f3921e135a8a1b0f36eb8ef624fdb8fa1af1b3560444e2353
-
SHA512
7acf92a7f21f6c2b7bf605671a253418762c9febd82fc91493c9ec6ac320abb77d67c2849e6f12bfadfafb1301257fc3b0378f061dbbb0bfe96223600f1c02ba
-
SSDEEP
192:JEOdtd/CCIHKrtDINynT+vqS34GPoUGlpGwS9CIHKrtDINynT+vqS:JE45wqTHAOSRqT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource becb299122dd8f6aae1dab0b0061259a_JaffaCakes118
Files
-
becb299122dd8f6aae1dab0b0061259a_JaffaCakes118.exe windows:4 windows x86 arch:x86
eb6f38be18b4aa522d212d68e35dbad6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ