Static task
static1
Behavioral task
behavioral1
Sample
c26337b4b2740c42eb14b74f0a650c45_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c26337b4b2740c42eb14b74f0a650c45_JaffaCakes118
-
Size
53KB
-
MD5
c26337b4b2740c42eb14b74f0a650c45
-
SHA1
a040308f2c791fb9c6d8730cb89ee132139fd051
-
SHA256
98e3101358d58958577ebc018d5466d737ed855a171dc95b105ca292b99dd252
-
SHA512
bb49a69dbfa51a3d093979f32be804cf77a0e26e44309c121ecae76374a262eabfec656e3bc531168761df748534311b6e314ed9521d5410ab78d19655926c56
-
SSDEEP
1536:xe5JllyK01IARyC8HiWndyf9TPDF++j4wDqPG:05JlUdIOyJfdyfFPDF+aDqO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c26337b4b2740c42eb14b74f0a650c45_JaffaCakes118
Files
-
c26337b4b2740c42eb14b74f0a650c45_JaffaCakes118.exe windows:4 windows x86 arch:x86
01bc1f62c7c3666eaf1a8b8d5f7c4d1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ