Static task
static1
Behavioral task
behavioral1
Sample
25ffd99f5b1d88f4a9b7235670a0cb9c_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
25ffd99f5b1d88f4a9b7235670a0cb9c_JaffaCakes118
-
Size
1.2MB
-
MD5
25ffd99f5b1d88f4a9b7235670a0cb9c
-
SHA1
e07fe7fdc2fed6225763a47d34fd5974b48488bf
-
SHA256
7780f29483fc21479f403c5abdf3ecac68885aae6f08baedf6b95f3eb2a10c31
-
SHA512
e77c8ab7717abc0a71620040f68e33bcfc67e9ecbdeac23ca359561b2fcd4ae84030103573692c3e8a27b8203d12a21f6266780525713ec3d7b79807cc07848c
-
SSDEEP
3072:2m3A4yjZIybYwEOCMRqWZAmDrlYSRcqzuD+s1IahUfBYR8jJPz2qJs9mTb4qHCS2:2mJxxd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 25ffd99f5b1d88f4a9b7235670a0cb9c_JaffaCakes118
Files
-
25ffd99f5b1d88f4a9b7235670a0cb9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
718a05c63664f10b01dcc10ce67a8079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord100
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ