Static task
static1
Behavioral task
behavioral1
Sample
2b819470ca6a9555c3721a5b93e8ef0e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2b819470ca6a9555c3721a5b93e8ef0e_JaffaCakes118
-
Size
328KB
-
MD5
2b819470ca6a9555c3721a5b93e8ef0e
-
SHA1
5a1944dcf19ef258c068182cfcb4ca6069453cd9
-
SHA256
1e43b66ac17ba60962820bac19448a9693eddfc4083d4f61b9819d46aab12fb4
-
SHA512
2d1b2e93483076134286cbdef1116b4d8df51503d3e46af524b9ea19247250bb9272dc45e07c37bd986199a1de58c69955414cfe0f9fffb751a77b7d139503dc
-
SSDEEP
1536:AmGHgne9y006hvHELWUkH7QXPuc0rsOB4Nx3beLTFdKI+ItnUmxnE:hGxyUFkLWc2cJOu3bSFdsIvE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b819470ca6a9555c3721a5b93e8ef0e_JaffaCakes118
Files
-
2b819470ca6a9555c3721a5b93e8ef0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
acb107bdb9ffcf6b65c186bbe13ceed1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadResource
LoadLibraryA
LockResource
ExitProcess
msvbvm60
ord588
ord589
MethCallEngine
ord516
ord518
ord598
ord520
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord717
ProcCallEngine
ord644
ord100
ord617
ord619
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jcLt Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
.Qtx Size: 4KB - Virtual size: 4KB
.IrEe Size: 4KB - Virtual size: 4KB
.FNa Size: 4KB - Virtual size: 4KB
.VBar Size: 4KB - Virtual size: 4KB
.rCwO Size: 4KB - Virtual size: 4KB
.wgr Size: 4KB - Virtual size: 4KB
.tEV Size: 4KB - Virtual size: 4KB
.stD Size: 4KB - Virtual size: 4KB
.VzA Size: 4KB - Virtual size: 4KB
.oGO Size: 4KB - Virtual size: 4KB
.kfge Size: 4KB - Virtual size: 4KB
.Tbi Size: 4KB - Virtual size: 4KB
.aZp Size: 4KB - Virtual size: 4KB
.iZy Size: 4KB - Virtual size: 4KB
.omTI Size: 4KB - Virtual size: 4KB
.TKY Size: 4KB - Virtual size: 4KB
.QQE Size: 4KB - Virtual size: 4KB
.foAd Size: 4KB - Virtual size: 4KB
.czR Size: 4KB - Virtual size: 4KB
.ROI Size: 4KB - Virtual size: 4KB
.Yvf Size: 4KB - Virtual size: 4KB
.vrD Size: 4KB - Virtual size: 4KB
.xST Size: 4KB - Virtual size: 4KB
.AiL Size: 4KB - Virtual size: 4KB
.HNh Size: 4KB - Virtual size: 4KB
.fKF Size: 4KB - Virtual size: 4KB
.EJun Size: 4KB - Virtual size: 4KB
.Zzl Size: 4KB - Virtual size: 4KB
.EHzZ Size: 4KB - Virtual size: 4KB
.BlhV Size: 4KB - Virtual size: 4KB