Static task
static1
Behavioral task
behavioral1
Sample
efbea9ca78df7c2f096dfe164a01ee4c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efbea9ca78df7c2f096dfe164a01ee4c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efbea9ca78df7c2f096dfe164a01ee4c_JaffaCakes118
-
Size
297KB
-
MD5
efbea9ca78df7c2f096dfe164a01ee4c
-
SHA1
fe402fdef3e93a4b1394aaae8690080e488416ba
-
SHA256
983e3e7edb11b83f0bdac009ddc5c557834ee60d83a6c8a6ddb087e2d0c5f359
-
SHA512
7dd950d3aae671891b10e89ecc8519b55ce43eab447dd596738cd32b5fdd4395d8b5ccee7a8bc277f151382597dc81af4ecc43e9a07439a98ae42e71071100e3
-
SSDEEP
3072:FhS1Aptv81Ch+DcglamzxJK7Ng7tBD+Cd1aBrwJN75urekwUEeHIym5l4arZFeRm:sJzlXz/+CDJZUE2I9rHqq9tz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efbea9ca78df7c2f096dfe164a01ee4c_JaffaCakes118
Files
-
efbea9ca78df7c2f096dfe164a01ee4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
997e7d352895027ce7a3278c095d4947
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord628
ord596
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ProcCallEngine
ord644
ord100
Sections
.text Size: 164KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ