Static task
static1
Behavioral task
behavioral1
Sample
c26dff584da6fa4945be74b82f5fbe2d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c26dff584da6fa4945be74b82f5fbe2d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
c26dff584da6fa4945be74b82f5fbe2d_JaffaCakes118
-
Size
332KB
-
MD5
c26dff584da6fa4945be74b82f5fbe2d
-
SHA1
779c1d4bcc756796fcf8af5cb0b098203aaa8f4a
-
SHA256
b1a3c03cc36efebc04639fc91d4a480c3ffaa77e21fbff2c522c47b420275242
-
SHA512
5d8e1d09f2d2ce3b62eb6db52835f7d2a35525f43c3632ec91b5baeaf5d6c07bd3c7cda1c73d5bff5c3253eeb5b20f7b1dc94e8c9269459a02d943d5ae0ae5e7
-
SSDEEP
6144:NwXsSeyekYXEdR8RyGqZH2XA6+/4UWtTS/FB6UVcYIOcRu5+B:NwXQTl0d0yZWUwUWtG/X6gJcRu5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c26dff584da6fa4945be74b82f5fbe2d_JaffaCakes118
Files
-
c26dff584da6fa4945be74b82f5fbe2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
905442fd99989e72f24e53bd9f568d1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord666
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ord717
ProcCallEngine
ord570
ord100
Sections
.text Size: 320KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ