Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6f8f5e1e4e90bd03d40dc65f314724eb.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6f8f5e1e4e90bd03d40dc65f314724eb
-
Size
348KB
-
MD5
6f8f5e1e4e90bd03d40dc65f314724eb
-
SHA1
72b239406aaf462e96289411326018aeac1ea948
-
SHA256
5541a280cc5256e7f2c670b97bf2422bbff16146c50eb6facdf83f0e44b16f98
-
SHA512
a9e7e642279756c18f3f9f727b5a8d9173b4fa20fe0d6066e664b02a2a2027ac04e7be0df1b73042a64fe904ed9e6f42183c89869f847c9919c780cac7563d0e
-
SSDEEP
6144:sjp3rB4mlvq4PPmjQMERrP2hp+mX9qx+7EOEkCO0DXmQ+39ak1tk2u8jM:tA/PesLR7WYufYOhUYta0x7j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6f8f5e1e4e90bd03d40dc65f314724eb
Files
-
JaffaCakes118_6f8f5e1e4e90bd03d40dc65f314724eb.exe windows:4 windows x86 arch:x86
300d76c240f78af6a0e3ab1ebc1facd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ