Behavioral task
behavioral1
Sample
288a7103046897a39158f226e2f461fa_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
288a7103046897a39158f226e2f461fa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
288a7103046897a39158f226e2f461fa_JaffaCakes118
-
Size
95KB
-
MD5
288a7103046897a39158f226e2f461fa
-
SHA1
d625c37c3af4e1cdf794f64fc292c8428c56607d
-
SHA256
01b30902bc011f645d54c49a63605149fc4be0de945b9226d6c747b3bddd494a
-
SHA512
a72391ea937a32ad28b405ebe43f84443e70d0f43a7bd42f3b62d679e91b2be03661355ae6312465464ce9173f9c872423d477c80f81deb30268ce4c5dd27c77
-
SSDEEP
1536:pkpgqSw6mTk1E8zNFXQfYls6NGS5U8ycj5okM:ZqSw6mA1l3X3l/3fh67
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 288a7103046897a39158f226e2f461fa_JaffaCakes118
Files
-
288a7103046897a39158f226e2f461fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
1a0b779d1be51f37b0e04de250a73c67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE