Static task
static1
Behavioral task
behavioral1
Sample
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118
-
Size
40KB
-
MD5
15e54d007bb01798f0e80f3166e5f94c
-
SHA1
80e834dadaa2ae376d63a1d65159df18b57dbd29
-
SHA256
f59db1575f20d1c0c79a78d00289aa6f271b36620724a47ab00def2183060851
-
SHA512
11aaccb848c14bae6f0d45581e3249085eb828225ac42b08861febea948d58e4e355fff9e7b1048540e5e356ecfca273ebc326ad8ebcb6a0219c1a910406ae00
-
SSDEEP
384:2FdKl3cRVsTtTuGtPKtxxj8THpN+iQkjnRkcWBBobIiN5xeiuP9zl6l+Zcijrg1W:E9RVsxfVnKnQTxgZbcSY1cki
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118
Files
-
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118.exe windows:4 windows x86 arch:x86
987d258dbbc9ee4f8beb94541b4df296
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord183
ord187
ord696
ord697
ord698
MethCallEngine
ord519
ord665
ord594
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord649
ord572
ord100
ord617
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ