Static task
static1
Behavioral task
behavioral1
Sample
f092f032301b4d71ab83f3f57e3f382f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f092f032301b4d71ab83f3f57e3f382f_JaffaCakes118
-
Size
336KB
-
MD5
f092f032301b4d71ab83f3f57e3f382f
-
SHA1
0123f314e6255f2d7dc86198bf9ec9eff83b029e
-
SHA256
1245fbe2692171dc1d6e7144af61fd49f0d3a2fecd38a3f46853dee1af1b8231
-
SHA512
d5cd2f1bb7901c3c28cffdc250734ae22b05d0d32c87732ac1098e9c6c022ada148ccbf96c1ab12758f071ccc774a106a1324bdc80c87455e2b2f41baa103770
-
SSDEEP
6144:SKEBwNyKpXCah3Ws3/bYELbNCu3y2mYx38kfueqW:SKEBw5Xz3//Fgu3ipkWeq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f092f032301b4d71ab83f3f57e3f382f_JaffaCakes118
Files
-
f092f032301b4d71ab83f3f57e3f382f_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4d49c6222e20896f8aee15ded654e6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord619
ord581
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.data_0 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�rsrc_0 Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.snake Size: 272KB - Virtual size: 272KB