Static task
static1
Behavioral task
behavioral1
Sample
1174aa742ca8f7c63231c24f7db224f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1174aa742ca8f7c63231c24f7db224f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1174aa742ca8f7c63231c24f7db224f0_JaffaCakes118
-
Size
100KB
-
MD5
1174aa742ca8f7c63231c24f7db224f0
-
SHA1
283fde6adbb61ee4e29f108c54ace65991906216
-
SHA256
3b5e319aa14708118bc82267dc3958aa113df98b706530c8cb3c02616f5548f1
-
SHA512
56baa63c7539c5f240492436ae2e18e1978db41bd92bd0ab4f700d419994361abb0a617d058c9274880fb9fb91b165ca3a746427e6424f342b3e8ee9df8c6aaa
-
SSDEEP
1536:KNHT/Ms7zejwSqKdtZaMWvfwhSXiUz6GA0VXcc0elM:KVEsvuZjkfwhuz6gNB0ei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1174aa742ca8f7c63231c24f7db224f0_JaffaCakes118
Files
-
1174aa742ca8f7c63231c24f7db224f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ef21201d031e2df209dfcfd0f590a89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord703
ord705
EVENT_SINK_AddRef
ord528
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord648
ord570
ord100
ord432
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ