Static task
static1
Behavioral task
behavioral1
Sample
39783f7db716c4af83d8ea5d694a55ff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39783f7db716c4af83d8ea5d694a55ff_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39783f7db716c4af83d8ea5d694a55ff_JaffaCakes118
-
Size
320KB
-
MD5
39783f7db716c4af83d8ea5d694a55ff
-
SHA1
3e946553e6dc811c804fa17aea7993004cf4aa3b
-
SHA256
dd3a5822ea7b41f2bb5c9e218c862e7a432698f76fd585b419faedb40313eeb5
-
SHA512
9ce3658c16f360a9cc7d93a92fed421b8c5a151d958f53f9ddffc87560b74f9b46039f7ea7cd996d56fe781ca1d6acf81a23a0d2a8c840a566985e0ef8bb05b1
-
SSDEEP
6144:cY7Dm56n5FAiaxnHqjXQMiRkNIyfoG22FyxgjjpMio0OpBWGPUba6fw:rXt5CiaZqELWbo8kxgjqWGPUbah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39783f7db716c4af83d8ea5d694a55ff_JaffaCakes118
Files
-
39783f7db716c4af83d8ea5d694a55ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e229bd6a47e9052d527d6204abd1f19
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord100
BASIC_CLASS_AddRef
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ