Static task
static1
Behavioral task
behavioral1
Sample
8888b93d6a87b7fbc0f85841cc8b3ccf_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
8888b93d6a87b7fbc0f85841cc8b3ccf_JaffaCakes118
-
Size
840KB
-
MD5
8888b93d6a87b7fbc0f85841cc8b3ccf
-
SHA1
236cf98bfd024526d5980eda7e066c9e86bab000
-
SHA256
662fddf93607611d1f94ee86b00c5829c4a49ae2cc88631f442e3fb1c12b8779
-
SHA512
4a8371520645b35f74ed33a44862cdf00587b0ce82a04b1062555ab326c32d727c4c85cdedf9609b227c6d156c562c86ed5b55bfac33f84c2f643e075d40ff35
-
SSDEEP
12288:epQ+E8IO150iAXr2bAQrRrjStFFHq1L4s9:J8IO1Gr2EIR0FpM4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8888b93d6a87b7fbc0f85841cc8b3ccf_JaffaCakes118
Files
-
8888b93d6a87b7fbc0f85841cc8b3ccf_JaffaCakes118.exe windows:4 windows x86 arch:x86
80f4e4ab863c7e1982228d9e4de9e4e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord626
ord667
ord595
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord530
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord619
ord580
Sections
.text Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Co2f9 Size: 560KB - Virtual size: 560KB
IMAGE_SCN_MEM_WRITE