Static task
static1
Behavioral task
behavioral1
Sample
7c5975405f1101d26a96beffab3f5611_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
7c5975405f1101d26a96beffab3f5611_JaffaCakes118
-
Size
6.4MB
-
MD5
7c5975405f1101d26a96beffab3f5611
-
SHA1
cbd9101501c5d83d9f60b6f8a6f75548896f2f6e
-
SHA256
708e5a1573b607b8cd440a59b07eb5113ed1d427aa4ab6fcea22a9e5c172c45c
-
SHA512
b4af3f3aad642b8f09e8fff49f0c8572f229f7f19ec1d3fa381a13dafbd2c432ca171a23ca454c313230b85b9ca92670bdf0cc06ec2129fe818c9601f95608f5
-
SSDEEP
196608:p6kK7zqQW9BxlghlY0DosNmC7TvwCyBgrDKt:p+fqQWplghlY0DmC78CVw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c5975405f1101d26a96beffab3f5611_JaffaCakes118
Files
-
7c5975405f1101d26a96beffab3f5611_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eeca44fad4ef68789d83df21cc2118e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord588
MethCallEngine
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ