Static task
static1
Behavioral task
behavioral1
Sample
245e550e7295d421882d5d525e5eefba_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
245e550e7295d421882d5d525e5eefba_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
245e550e7295d421882d5d525e5eefba_JaffaCakes118
-
Size
20KB
-
MD5
245e550e7295d421882d5d525e5eefba
-
SHA1
6bb278d924c200da3758378b019537b96a2e2db6
-
SHA256
694e5e03cbc2b0ec6144b2cf0323546829821b96c7504585acc4a5a44d7965a5
-
SHA512
d613c15a114288ff1b7fa4183055e220a76dfd88b54c2a9ea48d70c3c812fc08da43178ea3ac4dc17cd99b6d13c42711c40fe19e923d1f30c410115748f75250
-
SSDEEP
96:/lxjrO7+L57em5M2UqIYJcfF274haDaDnaybbqXkAcCfMDNeX1kEys2:/TaykcrVafF2WaDmnaoqXkAcC0DNT9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 245e550e7295d421882d5d525e5eefba_JaffaCakes118
Files
-
245e550e7295d421882d5d525e5eefba_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d5a3f375ca20ba5577c3d048db096dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaPut3
_adj_fdiv_m64
_adj_fprem1
ord519
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord525
__vbaChkstk
__vbaFileClose
__vbaGet4
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaFixstrConstruct
_CIsqrt
__vbaExceptHandler
ord711
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
__vbaNew2
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
__vbaVarDup
ord616
_CIatan
__vbaStrMove
__vbaAryCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ