Static task
static1
Behavioral task
behavioral1
Sample
d563e6efd89a55e47abe3ebe2cb5dc68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d563e6efd89a55e47abe3ebe2cb5dc68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d563e6efd89a55e47abe3ebe2cb5dc68_JaffaCakes118
-
Size
49KB
-
MD5
d563e6efd89a55e47abe3ebe2cb5dc68
-
SHA1
9fa8b8452882692d3498c8727369c422434f687e
-
SHA256
4f1451a1cd63567ceca49118d5b0e9bbb11a28d16aa5b373d42fe861b924a776
-
SHA512
3a2896d3271d3c33762d468922e4dd277059d2a1dcf95f930324e3d74a183d0b6e546280b245e9430491025ea4faf2e9a2d2d240787d2e12dc8f32459ab827c4
-
SSDEEP
768:9FOvFOTl3IFOs8a1exNvilQghg3upkl160dTdcEnLKjQG111yfsP7:msh7smTvS3+6gnmMQcfsP7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d563e6efd89a55e47abe3ebe2cb5dc68_JaffaCakes118
Files
-
d563e6efd89a55e47abe3ebe2cb5dc68_JaffaCakes118.exe windows:4 windows x86 arch:x86
32de330adec1d4d338e154c0983a5f72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord621
ord516
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord648
ord570
ord578
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ