Static task
static1
Behavioral task
behavioral1
Sample
db98f63dcba0c5a29653da74348c643f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db98f63dcba0c5a29653da74348c643f_JaffaCakes118
-
Size
264KB
-
MD5
db98f63dcba0c5a29653da74348c643f
-
SHA1
7d603b685dc53ce926d3be608df739b6f4a55446
-
SHA256
ff8f90ea4df5cd8f7e1a41729e6fa65d83d7c61341cad265e7ff368c99cd4821
-
SHA512
6638cb8fea61c3fe2f1b3a0b32452c17fa7e878b82df1d6a1132a2ced41bdb1bc654ab90421f9bf12aba07e1eb6fc613dfa1231cfb578b5480da079d3adac86b
-
SSDEEP
3072:Zg9DXX0e1FB/DpKjC6Wx/CHGOQgAwg2OfLgKNE:69DK1O0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db98f63dcba0c5a29653da74348c643f_JaffaCakes118
Files
-
db98f63dcba0c5a29653da74348c643f_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b4c0ade821a3672f78ba9d4b56588dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord626
ord628
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord537
ord644
ord572
ord573
ord100
ord617
ord619
Sections
.text Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ