Static task
static1
Behavioral task
behavioral1
Sample
f97ae82651465827440484538668e418_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f97ae82651465827440484538668e418_JaffaCakes118
-
Size
2.2MB
-
MD5
f97ae82651465827440484538668e418
-
SHA1
27d202b5313013476c933253d5a339b26e51e9b2
-
SHA256
d39dc83831a071e2e128d55c322f23580332a4c958d479086692bce5ab79cfe2
-
SHA512
b44c00a2a3a42b9837b7fcf6386fa4c0432e2de1bcb841856435dc7be2d4187227b700c365e888ad56512859cec6d01c52f65b6854c352511e66d2c1a334a6e0
-
SSDEEP
6144:WCFTS7NO4QwfzHBoItLKl7XVhSh1OVgUECql7XVhS:WZNJnDSIglJhSOVgUClJh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f97ae82651465827440484538668e418_JaffaCakes118
Files
-
f97ae82651465827440484538668e418_JaffaCakes118.exe windows:4 windows x86 arch:x86
2afdd4f403a3ad64c6c4adbe1d38a60b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ