Static task
static1
Behavioral task
behavioral1
Sample
d98cf3e2fd772218f70b21bbd3d0ba54_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d98cf3e2fd772218f70b21bbd3d0ba54_JaffaCakes118
-
Size
100KB
-
MD5
d98cf3e2fd772218f70b21bbd3d0ba54
-
SHA1
5825671a47edbe4062d7274563e00e74965b7047
-
SHA256
c1c8c0c2db79f1c0e335bce6f746b33b0e829e5156f63691fb3b1085ad451583
-
SHA512
cbcbcade6fa0a265b44ec66ea36015573c00159129a9aae88ae8007cb8aa41430a96056a702635703b67f483c83c864cc1e3ffe412dadd719580bcce15b6abc7
-
SSDEEP
1536:2JT0xnr3JSYgsO911mG7cDD+Jw3YFuCDUEM2R2VwV2kg:2Jm3gso1gGADD+23ogE5R2sg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d98cf3e2fd772218f70b21bbd3d0ba54_JaffaCakes118
Files
-
d98cf3e2fd772218f70b21bbd3d0ba54_JaffaCakes118.exe windows:4 windows x86 arch:x86
3718be4ca963513b7f4189b38be4061f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord665
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord644
ord100
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ