Static task
static1
Behavioral task
behavioral1
Sample
4115b6471d8775edd47105900cf5a363_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
4115b6471d8775edd47105900cf5a363_JaffaCakes118
-
Size
327KB
-
MD5
4115b6471d8775edd47105900cf5a363
-
SHA1
9575725b5916b313ceba854e2286985501784c77
-
SHA256
3f6fdb4a8b3ae3a485872a6bda9d12a50ed543c6d0443031b2239496877c0618
-
SHA512
5a7c001a2429b229b750987f3fdbb7413fadbf7fb6f1153e40a53949f8915d19f71b16daef037333a6f82d6c0f7e8877b4d1ee7aed0e93c97592abc0d8160314
-
SSDEEP
6144:Wx8kvxeJjbl7xdY/kwsZDxzPVaFSiNxnx8bQxURt3C/ytXwu:4YJpgNshxz5k56tltXT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4115b6471d8775edd47105900cf5a363_JaffaCakes118
Files
-
4115b6471d8775edd47105900cf5a363_JaffaCakes118.exe windows:4 windows x86 arch:x86
33108074e74868649289790a6d175762
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord717
ord644
ord537
ord573
ord681
ord685
ord578
ord100
ord613
ord617
ord619
Sections
text Size: 3584.0MB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ