Static task
static1
Behavioral task
behavioral1
Sample
c0849c970e81ef5f45ac78732d89ecfb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0849c970e81ef5f45ac78732d89ecfb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0849c970e81ef5f45ac78732d89ecfb_JaffaCakes118
-
Size
200KB
-
MD5
c0849c970e81ef5f45ac78732d89ecfb
-
SHA1
f9ba0286acae3e1ba26d3b0857d0af49dc7d4a8c
-
SHA256
e97bb304401f8861c99f3fa7addca336cbfdcfc9e10bc6cc9cbe37441af05a87
-
SHA512
7f89824a1d5f406c29fdb5d8e780ef41685655d198b3d4464c5eeffea18771345ae3abf00104b5f48716f77c808d54c7fd9682f564d1feb2ff169d34ab23e03c
-
SSDEEP
3072:DqKloQSrkKgRENEI5apGTwQqVMTW0hiJDUet1D3RErS:DV1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0849c970e81ef5f45ac78732d89ecfb_JaffaCakes118
Files
-
c0849c970e81ef5f45ac78732d89ecfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
c83d9291036687b62b8ae1aa85bdc856
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord681
ord100
Sections
BitArts Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE