Static task
static1
Behavioral task
behavioral1
Sample
f71be00c93d69fa9349039bd3c6dccfe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f71be00c93d69fa9349039bd3c6dccfe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f71be00c93d69fa9349039bd3c6dccfe_JaffaCakes118
-
Size
48KB
-
MD5
f71be00c93d69fa9349039bd3c6dccfe
-
SHA1
ae382512423c199c7464eae05fdc4f286492ccf2
-
SHA256
d8e49c0c3a63ae6e8f2b8c0deb626908e47ba2d4d9cedfee6935a89d66774615
-
SHA512
56269ea31ed448b4abafe2799439171a01c0e1711bc014b151103a4c8f2535eac083a4381e964607fc48c888e3b27487e504739d5270e66e7ae2aa6488804b38
-
SSDEEP
768:89TNzY5RKJcVnNF33BQ8/7if2EA737WIugLCNZWFFM8xLLl8+rKiXT:gNq37Of2EA73vlLCNZgMuxXui
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f71be00c93d69fa9349039bd3c6dccfe_JaffaCakes118
Files
-
f71be00c93d69fa9349039bd3c6dccfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9f8b9d8f695ec5f37395cc7c210a48f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord519
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord581
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ