Static task
static1
Behavioral task
behavioral1
Sample
961820efaec3cd9b7646858db5fa05fa_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
961820efaec3cd9b7646858db5fa05fa_JaffaCakes118
-
Size
208KB
-
MD5
961820efaec3cd9b7646858db5fa05fa
-
SHA1
01b57107a5a531104290bcfd863cb589b1eb39a8
-
SHA256
d5312f666d81884d75bdc8bf34793c8ce123fcbb3510efc3f7fe7404b40a2490
-
SHA512
f3df1b064191d7de71ff78b9abdb89bfd2aa6cbd71ca278f6794f433297e8cae1d8648bb29b75cac6fb974e86ea51f15c7da67e49ecc88d86e7549bc61c7f9c4
-
SSDEEP
3072:jEuGIirAcaxdhfgZhAchfgZh7UwKgE7juxet4K2t7ZaAkL0hfgZhA:jEKhfgZhLhfgZhQw1E7veD7eIhfgZh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961820efaec3cd9b7646858db5fa05fa_JaffaCakes118
Files
-
961820efaec3cd9b7646858db5fa05fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee3e89205e960fa91dee021cbfdb0d8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord516
ord518
ord660
ord593
ord595
ord599
ord520
ord631
ord632
EVENT_SINK_AddRef
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord644
ord537
ord645
ord681
ord685
ord100
ord689
ord610
ord617
ord546
ord581
Sections
.text Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ