Static task
static1
Behavioral task
behavioral1
Sample
2a789c9e2231960bc08b32dc3c80c258_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a789c9e2231960bc08b32dc3c80c258_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a789c9e2231960bc08b32dc3c80c258_JaffaCakes118
-
Size
304KB
-
MD5
2a789c9e2231960bc08b32dc3c80c258
-
SHA1
9998749650cee4954677c7b25ae87499b098c4e7
-
SHA256
d2a377ad7baacb8877c105e0d56628b6933cfe0c0e4c82a2ea44acec2553e706
-
SHA512
3bc21df0e8c65972cba2b35943abb4a148de7642e1776ce529d4370080f684d56f246ab7edc2395618a712047372becd682776bd3f4cf56a6e8de9af8846f3dd
-
SSDEEP
3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a789c9e2231960bc08b32dc3c80c258_JaffaCakes118
Files
-
2a789c9e2231960bc08b32dc3c80c258_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec93d43ff758b5de7005a039a7bf80b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord697
MethCallEngine
ord628
ord661
ord662
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord100
ord546
Sections
.text Size: 292KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ