Static task
static1
Behavioral task
behavioral1
Sample
D7CCEEB1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
D7CCEEB1.exe
Resource
win10v2004-20241007-en
General
-
Target
c43017cc0320c43e18aaac75b57907aa_JaffaCakes118
-
Size
81KB
-
MD5
c43017cc0320c43e18aaac75b57907aa
-
SHA1
39f135088df0baee9cf96eebd38423d7bc37e3bd
-
SHA256
decafaf1de7ecf060bdf9e58bdc7d3d22ec2c7b763764930e0120ac542009117
-
SHA512
a17da26211e0a7ecfc102c9aec8112be1f395527e5673b62c3aa5577cf1604e759d505d9099a951ff7e07d4c92255c8a7e6200bc71407f34401005908d0f9977
-
SSDEEP
1536:ET5M3JN9r1vdjjMFMoV1wdXbwQEGzbBC9/zEAtZkgVdPhMcA/fQ1u1:gMdrVp8WXbwQEGz09AA7V3A3Q1u1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/D7CCEEB1.EXE
Files
-
c43017cc0320c43e18aaac75b57907aa_JaffaCakes118.zip
-
D7CCEEB1.EXE.exe windows:4 windows x86 arch:x86
9f2b4bdc33a48576e229bd9b7720eedd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord619
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pring Size: 48KB - Virtual size: 48KB