Static task
static1
Behavioral task
behavioral1
Sample
efb036b779fbc566a7de2d8f569a24d2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
efb036b779fbc566a7de2d8f569a24d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efb036b779fbc566a7de2d8f569a24d2_JaffaCakes118
-
Size
128KB
-
MD5
efb036b779fbc566a7de2d8f569a24d2
-
SHA1
b6450e62c6067fe64553dac81dec22c198df8eb2
-
SHA256
64131fe3053200bd196747fd654a9993eb917a31a09115174844e4ae3e030d0d
-
SHA512
dc1c6514b8c40b1cc9e077e29c1af568f0c9dedc9b72e51b1e1f0e6daa37c4c4e38eae085854d14fcb1d9918fd6a3f048041370821e0358e8eba07449839fe6f
-
SSDEEP
1536:S0cTYl02OnFlJiq6H48O6j6/t66366Z6Jz36k6eA66KD6sqG/Oji6FA8HxAH6xMy:lYD2OnFzS3e50lMZZZZWMkIJlP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efb036b779fbc566a7de2d8f569a24d2_JaffaCakes118
Files
-
efb036b779fbc566a7de2d8f569a24d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ee038bea026d5e41d1404ac14637f53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord667
ord669
ord595
ord598
ord599
ord520
ord523
ord709
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord681
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619
Sections
.text Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ