Static task
static1
Behavioral task
behavioral1
Sample
37a84c92bae874778e2937643c8258ae_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
37a84c92bae874778e2937643c8258ae_JaffaCakes118
-
Size
1.2MB
-
MD5
37a84c92bae874778e2937643c8258ae
-
SHA1
154906983733ee289f6f549452257952a086f159
-
SHA256
9cba87cf8d521d67939cf91ba9a494254f598169bc009c6c283516ac2142ac2c
-
SHA512
1cb62d46a6a76fbb510568b633fc941cd792ecb3e148bf7ad5442425ca82aed7e7188f6824e564868ac19fe3362e553ee04eff99c5a779fb7ad3ac1370d52000
-
SSDEEP
3072:OLC3FL+0zX96V5y+MkLg/BN086QFdYN0CEdtUOgZpJVz958NMhfqCd5qa4ikdPnB:AY51oJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37a84c92bae874778e2937643c8258ae_JaffaCakes118
Files
-
37a84c92bae874778e2937643c8258ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
2afdd4f403a3ad64c6c4adbe1d38a60b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ