Static task
static1
Behavioral task
behavioral1
Sample
15ece4e09821d1b2078f84cc276b9252_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
15ece4e09821d1b2078f84cc276b9252_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
15ece4e09821d1b2078f84cc276b9252_JaffaCakes118
-
Size
938KB
-
MD5
15ece4e09821d1b2078f84cc276b9252
-
SHA1
dde65628b2236174e2f6a2ccac58626ccfac6201
-
SHA256
f6931d37dd2f6d56fa7bc309d39b8eb3c4eef5c8111c2e34457c6aee43bfb9cb
-
SHA512
ce9c20ea0dae63b3fc1d2af1756938541557150e5bc05eeac33cac67c3e9f554cad22e85d608cccd0e6d48fbadf37037c64101fed0b2bfe7b67d329f6d8d42fc
-
SSDEEP
12288:wQ54vuTl9XTs/mWH6rL0EniQn9ClCblL3qUi2fgBg41:w1WB9j+jgwup9Cl4ljqU3gBd1
Malware Config
Signatures
Files
-
15ece4e09821d1b2078f84cc276b9252_JaffaCakes118.exe windows:4 windows x86 arch:x86
f48482fb47032816e86b7fb1b21137e0
Code Sign
01Certificate
IssuerCN=?????? ???,O=??? ?? ?? ??????,C=JPNot Before23/10/2018, 08:00Not After22/10/2022, 08:00SubjectCN=?????? ???,O=??? ?? ?? ??????,C=JPca:76:24:ca:02:62:4b:a8:12:1d:f5:ca:b6:b0:2b:ad:20:d9:8d:05Signer
Actual PE Digestca:76:24:ca:02:62:4b:a8:12:1d:f5:ca:b6:b0:2b:ad:20:d9:8d:05Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaFileCloseAll
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord714
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaInStr
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
__vbaVarDup
ord616
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
__vbaFpCSngR4
_CItan
__vbaUI1Var
_CIexp
__vbaFreeObj
__vbaFreeStr
Sections
.text Size: 908KB - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ