Static task
static1
Behavioral task
behavioral1
Sample
d25244325b9bc5ed64196d6f9241064f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d25244325b9bc5ed64196d6f9241064f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d25244325b9bc5ed64196d6f9241064f_JaffaCakes118
-
Size
142KB
-
MD5
d25244325b9bc5ed64196d6f9241064f
-
SHA1
36cb6ee0e1bfae0ced42a02a8eaf120aaa1d83e9
-
SHA256
b239b13e25a118d626fb75fd228052a4c6232eeeb1e0bc6887b350fda97cca66
-
SHA512
d16ade6838f1f0b925e045019870f4bf606dc175cd611713479075023400ca90f2bc3684c0e4d07f686c1b1a74edefd7374f12a8b2fef970bf6949a39f83d57c
-
SSDEEP
3072:FUXi7Z2gcsRxAftxlre7hcEIdGPzdAfJbdT5c:FUXWZ2gcoyt2qwdARc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d25244325b9bc5ed64196d6f9241064f_JaffaCakes118
Files
-
d25244325b9bc5ed64196d6f9241064f_JaffaCakes118.exe windows:4 windows x86 arch:x86
61244e24ecb52b28fb4d733e10645d33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
user32
ShowWindow
msvbvm60
ord696
MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ