Static task
static1
Behavioral task
behavioral1
Sample
0d96d266fa6451d8ac27c7419f7de095_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d96d266fa6451d8ac27c7419f7de095_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d96d266fa6451d8ac27c7419f7de095_JaffaCakes118
-
Size
52KB
-
MD5
0d96d266fa6451d8ac27c7419f7de095
-
SHA1
27d0da03dd973a1f849e54d25ce6e3e93e866340
-
SHA256
b528924c520c91b22c29e8a62b7749661ddee0601f594b5186c2e0e038b0745e
-
SHA512
b24e0c6fd68d37ff75c781ec0a8390caaaf18f96cc2d4abbbcb01760d1621e7e05c1bdc78533b5bf367cc68973959963b6f6309728f9529a3c5e71c6160708f7
-
SSDEEP
768:+RUyJAvA6XZX97HtqbEB5jz/2wHiz5pyuVUrqQ26jn3z/GFGya1UVikjiwpt:b197NDzjz/2wHitGrqK3z5yKkj9p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d96d266fa6451d8ac27c7419f7de095_JaffaCakes118
Files
-
0d96d266fa6451d8ac27c7419f7de095_JaffaCakes118.exe windows:4 windows x86 arch:x86
0e132f043ba3909366f2be45caaf1c17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ