Static task
static1
Behavioral task
behavioral1
Sample
fb24328e5c7d4525bf4bb1cfef13012e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fb24328e5c7d4525bf4bb1cfef13012e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb24328e5c7d4525bf4bb1cfef13012e_JaffaCakes118
-
Size
388KB
-
MD5
fb24328e5c7d4525bf4bb1cfef13012e
-
SHA1
9083eba84216421b9e4c8030ce670a63594dedca
-
SHA256
b04faecdf96d7fb068d4b2a4ecf61dbbac186d36cc6d4b3e756818c3ef57dc72
-
SHA512
d084a98d3c86382cb2b347142df29c6bb71fff27b8719c9b5e8d4dffa55ba1f9179ca187a89d0ecf46542df6856f0d6bf20841940a39cde685c4f4d7a84da15b
-
SSDEEP
3072:7p0bSQ1TZZS+48aXNZzVK+hyRfYWeRxyvEIEK7JwpRi/ZOAAu5dvup4fk9wpxq0P:7aLwR3Iaps/w4d2pP3ywRgc769/c0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb24328e5c7d4525bf4bb1cfef13012e_JaffaCakes118
Files
-
fb24328e5c7d4525bf4bb1cfef13012e_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d953012715343f0a01200a05369c26a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord598
ord525
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord681
ord100
ord616
Sections
Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE