Static task
static1
Behavioral task
behavioral1
Sample
e05e396f6d95094185e91ee6141e66a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e05e396f6d95094185e91ee6141e66a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e05e396f6d95094185e91ee6141e66a9_JaffaCakes118
-
Size
232KB
-
MD5
e05e396f6d95094185e91ee6141e66a9
-
SHA1
0ada554f270baffca0f365533a456a31f3d8e667
-
SHA256
88df095a28ea561bc2a8f6e96b8c58ce4496ba4562c54c3e32c93ab4081d85f7
-
SHA512
8963f746717fe0d62458095c2325522271c1e82585e1ae4f61710ca712aaa35417be6dc4e30b8b39a73f11ecad0d024923ccff1639d16af246b229061c086710
-
SSDEEP
3072:FagmvJfdXVCAX73xRRdr9evN0QfEs8qGu2wFEb:FfCdlF73xfdQvN932eS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e05e396f6d95094185e91ee6141e66a9_JaffaCakes118
Files
-
e05e396f6d95094185e91ee6141e66a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
7cbafe4718200b53ff07e1bf9c561ff2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
ord697
MethCallEngine
ord626
ord519
ord705
ord631
ord525
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord713
ord607
ord531
ord536
ord645
ord648
ord571
ord576
ord685
ord578
ord100
ord616
ord618
ord542
ord543
ord546
ord580
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE