Static task
static1
Behavioral task
behavioral1
Sample
d0147b4a4b49b45a4f44c37aa6092878_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d0147b4a4b49b45a4f44c37aa6092878_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0147b4a4b49b45a4f44c37aa6092878_JaffaCakes118
-
Size
500KB
-
MD5
d0147b4a4b49b45a4f44c37aa6092878
-
SHA1
484b89420adbda5fe7a442f217163ec14e4052c6
-
SHA256
9b728b916bfe0a2f6ffd36f0756f9c1cc7246a42c59e825eeb2fb82d0869aef9
-
SHA512
5e90cd3dd347417693703845ed6afc5e75fac1a8f509461d9904d61b3d9842a0c786b8443c5c602d098c77acbf384d500cf24468cd15bc28391291e0752bf371
-
SSDEEP
12288:g1+mcyGwkLpc+xTDVvx3OPUgg8qvo15hHSCQ4oj1n7crchFce3aeh:I+mcHwkLpc+xTDVVGf5hyCQXerc/T3ae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0147b4a4b49b45a4f44c37aa6092878_JaffaCakes118
Files
-
d0147b4a4b49b45a4f44c37aa6092878_JaffaCakes118.exe windows:4 windows x86 arch:x86
2787496d51c76a3f3de4ab4fb352bd4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord100
Sections
.text Size: 488KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ