Static task
static1
Behavioral task
behavioral1
Sample
ea9b49ec23588866cdfcf6b26e8086be_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea9b49ec23588866cdfcf6b26e8086be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea9b49ec23588866cdfcf6b26e8086be_JaffaCakes118
-
Size
188KB
-
MD5
ea9b49ec23588866cdfcf6b26e8086be
-
SHA1
5c66ec98a245b743da2b03103a613184f9b3f19d
-
SHA256
4a9c4a6c3cec852f026021a0fa74449b5919c3c4d8e425215510e66d071687de
-
SHA512
4f6bf6503cb79fc8599cb309ff6f1a016ab0e3378ef92839ebb94f0f7f8e373e847e0c7e057c9d03397af28b4e455d0f1c64c06c0236e7e28e9fa09b4674b388
-
SSDEEP
1536:nOlUIsOmCsNjyEBiMTq+ue3guzsUJaWFJu3:nkxMZRTq43guPJaWi3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9b49ec23588866cdfcf6b26e8086be_JaffaCakes118
Files
-
ea9b49ec23588866cdfcf6b26e8086be_JaffaCakes118.exe windows:4 windows x86 arch:x86
a5bdd18a13a8770463ab9e4053965f5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord628
ord595
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord717
ProcCallEngine
ord644
ord100
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ