Static task
static1
Behavioral task
behavioral1
Sample
3384c720b447f49a2a0d9dfb8d4ee679_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3384c720b447f49a2a0d9dfb8d4ee679_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3384c720b447f49a2a0d9dfb8d4ee679_JaffaCakes118
-
Size
33KB
-
MD5
3384c720b447f49a2a0d9dfb8d4ee679
-
SHA1
cd7e702256252ad767bcefbf148365d7a956c96a
-
SHA256
9f0aa9a2884a9080f8c28700a76a6e51705ca7bedac017a0b5197ee257f5c7e0
-
SHA512
d19cb982263658ed1a42233b7af59e169f4948e57ad97b0aca553be0626fd7df9a495cb2e455772960b98e2d1771e3020b02e1353d3c2c906ccfbda936ecc730
-
SSDEEP
384:zPu5Nwd8ZbkqDhWrrlkdF3FOIojhbvn3tvIp48pXi9E:zAmd8hyrQF3FWb1v2qE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3384c720b447f49a2a0d9dfb8d4ee679_JaffaCakes118
Files
-
3384c720b447f49a2a0d9dfb8d4ee679_JaffaCakes118.exe windows:4 windows x86 arch:x86
b590d09837fe4248af308432c5f5a695
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__VBaAryMove
__VBaFreeVar
__VBaStrVarMove
__VBaLenBstr
__VBaFreeVarList
_adj_fdiv_m64
__VBaRaiseEvent
__VBaFreeObjList
ord516
_adj_fprem1
__VBaStrCat
__VBaLsetFixstr
__VBaHresultCheckObj
_adj_fdiv_m32
__VBaAryVar
__VBaAryDestruct
__VBaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
__VBaStrFixstr
_CIsin
ord632
__VBaChkstk
__VBaFileClose
EVENT_SINK_AddRef
__VBaGenerateBoundsError
__VBaStrCmp
__VBaGet3
__VBaPutOwner3
_adj_fpatan
__VBaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__VBaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
ord608
__VBaFPException
ord717
__VBaGetOwner3
__VBaUbound
__VBaVarCat
__VBaLsetFixstrFree
_CIlog
__VBaErrorOverflow
__VBaFileOpen
ord648
ord570
__VBaVar2Vec
__VBaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__VBaStrCopy
__VBaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__VBaVarDup
__VBaVarLateMemCallLd
__VBaFpI4
_CIatan
__VBaStrMove
__VBaAryCopy
__VBaR8IntI4
_allmul
_CItan
_CIexp
__VBaFreeStr
__VBaFreeObj
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ