Static task
static1
Behavioral task
behavioral1
Sample
160e4e359ff4f0c50b2553271d136f0b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
160e4e359ff4f0c50b2553271d136f0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
160e4e359ff4f0c50b2553271d136f0b_JaffaCakes118
-
Size
476KB
-
MD5
160e4e359ff4f0c50b2553271d136f0b
-
SHA1
8a84f25dfe6361e2ccaab4c9e5a064dca6c753ad
-
SHA256
1438ab28de707fcb43c31111816d03d23459f810b73eb155c60623f28544caa8
-
SHA512
ff77a913eb196cb03924e493c10c4a07267cfdf807474058a08aa9297a66831667fbc077462f8619848e755a2989359ad6e8674587e8afa80803492b1e221ded
-
SSDEEP
6144:UlE94LMfWPtYg2Fw1YEGK1om851TI6QaASmRBx9IlZi9/bnNkunQ0uQkwPDiHWUT:UNp2Fwq2omWI6QJd2lc1D5nQ79DBf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160e4e359ff4f0c50b2553271d136f0b_JaffaCakes118
Files
-
160e4e359ff4f0c50b2553271d136f0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
51e81fda964ba4ce1d8a1b0875298f94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord666
ord593
ord594
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord578
ord100
ord616
ord619
ord581
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TWtf Size: 88KB - Virtual size: 88KB