Static task
static1
Behavioral task
behavioral1
Sample
d1adf68e69fc7c4454cd307d22d45881_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1adf68e69fc7c4454cd307d22d45881_JaffaCakes118
-
Size
316KB
-
MD5
d1adf68e69fc7c4454cd307d22d45881
-
SHA1
8f136a1c7a4dd6514c8029162f7453f0dfbba1c9
-
SHA256
e2ccddefb091d895a61cda453b8eef4aef2518bccc6f48e27280b492aae2ac9f
-
SHA512
3143b1861e196f6f2bc34977aef0eb141d2cbc0f4983328b34fac4ee6498e0eace54f9347fd60897627c65d9bd55cdb8d35d08e92be9e63e7afdcf3a94d28749
-
SSDEEP
6144:+g4llx38FpxyCWXfapiQwZEXdlc4GNr+a//pRdtheVB4EY1+P:+l138DWXoibyXdrG+a5RdbE4E4+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1adf68e69fc7c4454cd307d22d45881_JaffaCakes118
Files
-
d1adf68e69fc7c4454cd307d22d45881_JaffaCakes118.exe windows:4 windows x86 arch:x86
5dfc90d17f57851e6f14a6434d25e7a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord665
ord669
ord593
ord594
ord595
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord537
ord644
ord100
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ