Static task
static1
Behavioral task
behavioral1
Sample
e1d6c2b74a604494b06e25d89937afa6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1d6c2b74a604494b06e25d89937afa6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1d6c2b74a604494b06e25d89937afa6_JaffaCakes118
-
Size
60KB
-
MD5
e1d6c2b74a604494b06e25d89937afa6
-
SHA1
3d65938a937234335c7f74d51907bef20aa5ab1c
-
SHA256
4db8783e51f272c51b7c37cb5b189158f93bffdd69509fd11f820cfdcf19f8d1
-
SHA512
209c9fee0d39462f0e38a62f8b799f93637c1d490cc4fc46ccb83d61069aaa81c8313be72a3f0269e0d3a58777896a6408cb071e6fbc27e22d056730c93647aa
-
SSDEEP
768:oQBUyAngbrJ7z0JJm2dSUMAWkUcbTmFIkNcSFIkid+J9KOe8rgYn6IR4WspB6W8V:fAgxUDsjtVmkSem0NMJ6XtFIewj0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d6c2b74a604494b06e25d89937afa6_JaffaCakes118
Files
-
e1d6c2b74a604494b06e25d89937afa6_JaffaCakes118.exe windows:4 windows x86 arch:x86
184bae34cec7721822b9682e22f6cafe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord584
ord187
ord696
MethCallEngine
ord517
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord614
ord431
ord617
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ