Static task
static1
Behavioral task
behavioral1
Sample
82eec46db1a8b7fd1ce6914fbd62b660_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
82eec46db1a8b7fd1ce6914fbd62b660_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
82eec46db1a8b7fd1ce6914fbd62b660_JaffaCakes118
-
Size
736KB
-
MD5
82eec46db1a8b7fd1ce6914fbd62b660
-
SHA1
6c3abe728053a17beefecaa54b3d195de8e92a88
-
SHA256
f27980d20bb00e03993312429fac857959c23c172408dfdad8010621f82befc4
-
SHA512
d986a72273b7d635fac86048ef6d86f9d4836133221c5d194b79f5072f54ae3044aaf1505d47d71b28d6167923095e02b201e7beca0dc8fe39680f77a6bfa66a
-
SSDEEP
12288:2po4u1mY3gb/z60Vz5Xw5BWcw0J4K6AasOfZey:oo91mY3Oz6O5gLW30JnfKx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82eec46db1a8b7fd1ce6914fbd62b660_JaffaCakes118
Files
-
82eec46db1a8b7fd1ce6914fbd62b660_JaffaCakes118.exe windows:4 windows x86 arch:x86
8869fb764125d2c0d16be736ccd30e3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord714
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarAdd
_CIatan
_allmul
_CItan
_CIexp
Sections
.text Size: 696KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ