Static task
static1
Behavioral task
behavioral1
Sample
05560daa4a641556952bdf60a2285b96_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
05560daa4a641556952bdf60a2285b96_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05560daa4a641556952bdf60a2285b96_JaffaCakes118
-
Size
16KB
-
MD5
05560daa4a641556952bdf60a2285b96
-
SHA1
6e91e7f590ae7efdabd9808d30b894f383fbcb13
-
SHA256
e997a72027caea6802737f3a9001e5432e7c8bc9972d63033d6093b1e3fc5d6a
-
SHA512
dcfc206284999e00468c84fb76457257e64e4d2e7079be952ca061ce0eb9c5fd45a80851229e384de0c7ceecba213ca42ba3c727fb2da2eb20ba43d4e3debce2
-
SSDEEP
96:0/HJ58icD/bzMuiT0o3hhvq44dHyV55RQFMjqoDsxAm9Ss2U:kfijz+T0ixj6xHssn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05560daa4a641556952bdf60a2285b96_JaffaCakes118
Files
-
05560daa4a641556952bdf60a2285b96_JaffaCakes118.exe windows:4 windows x86 arch:x86
58784c5a4014a6ad40dd374ec22affc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vbasic Size: 26B - Virtual size: 26B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE