Static task
static1
Behavioral task
behavioral1
Sample
3fe638a8e969a32af4a01b12db6486d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fe638a8e969a32af4a01b12db6486d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fe638a8e969a32af4a01b12db6486d9_JaffaCakes118
-
Size
12KB
-
MD5
3fe638a8e969a32af4a01b12db6486d9
-
SHA1
e34d9c2dbb2d6cf990878a39ce36335e327a51c9
-
SHA256
48cfb7ad88a6b70866159cf1b09ab78f5b094d1b61eb45b7862daecb0b02c4cf
-
SHA512
c141b82541699c722d1588cdb2f087cb37a69f25fdfbcf798f65c1dadb927c5f7384113d80f2b4471d1f25ea9720493f204ec8d2f60f98449ad7560250501ba9
-
SSDEEP
96:zyJJnkTVa5tXXiXGIdyuuzxv36Aq2S7klkZ8nRzI2M:zotD7XIREt36z208g8nlIH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe638a8e969a32af4a01b12db6486d9_JaffaCakes118
Files
-
3fe638a8e969a32af4a01b12db6486d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
0d017ae56c7b8b6251417b42a1effdf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
ord516
_adj_fprem1
__vbaVarCmpNe
_adj_fdiv_m32
__vbaVarXor
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarMod
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ