Static task
static1
Behavioral task
behavioral1
Sample
e9e682fa2a14b3a92c1ad6e0ca274541_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e9e682fa2a14b3a92c1ad6e0ca274541_JaffaCakes118
-
Size
108KB
-
MD5
e9e682fa2a14b3a92c1ad6e0ca274541
-
SHA1
9776b31a03c0a28d36ef83e059dd12871e8c55e9
-
SHA256
60c7a6f92530ebdaf9148cd517355e8f7bbeaa22e9e0da810f07d2210ff75a59
-
SHA512
7cb7d5c717f0389a09e428f5e9defb5160ffd0de5dd49bf1759859ba6d7e6d229d8d72da53ec4330b15e7c127d89e71cab5272f6952386f65d348c7679adc621
-
SSDEEP
1536:Ks5zm6eYHh87TMWm6dD12iyUHsQ5mycMMuakP:rWI6dB23UHVQycM1akP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e682fa2a14b3a92c1ad6e0ca274541_JaffaCakes118
Files
-
e9e682fa2a14b3a92c1ad6e0ca274541_JaffaCakes118.exe windows:4 windows x86 arch:x86
5de3e5d504e7734650eca7a3db9f96ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
ord516
ord626
ord628
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord576
ord100
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ