Static task
static1
Behavioral task
behavioral1
Sample
48c7cf3e95dd86367bda6fe6823a5dcb_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
48c7cf3e95dd86367bda6fe6823a5dcb_JaffaCakes118
-
Size
326KB
-
MD5
48c7cf3e95dd86367bda6fe6823a5dcb
-
SHA1
a3cb98d368d1a2bc976d1141fda28aa7b02395c7
-
SHA256
531cd9532b31ddc4aa9d23c0cf40316afa5eafee17d7090df49b0c7fc92f2ca3
-
SHA512
55352443b146e11e5c5808520483a273a90a8f3204ca2ce594b763a5a2cb70ca173f45892f895580ebcf8bf399602c529f6dd429d393bc5714f0de498b27f51c
-
SSDEEP
6144:kUdNNUkQB28DmI6h9qHUqT0Bhw/NlxT3NOYenbKGIDtNbRvW6SUI:5QZDP+qHU4ahw1lxAv5yx+r
Malware Config
Signatures
Files
-
48c7cf3e95dd86367bda6fe6823a5dcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
a0a7323898f6d1494d9b24b380a5ef31
Code Sign
01Certificate
IssuerO=Internet Widgits Pty Ltd,ST=AS,C=SDNot Before12-05-2012 13:10Not After12-05-2014 13:10SubjectO=Internet Widgits Pty Ltd,ST=RA,C=FR6d:39:fc:e4:77:3c:b5:c4:22:e7:31:24:75:dd:7c:d5:ec:a7:04:2cSigner
Actual PE Digest6d:39:fc:e4:77:3c:b5:c4:22:e7:31:24:75:dd:7c:d5:ec:a7:04:2cDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarTstLt
__vbaBoolVarNull
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
__vbaR4Var
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarTstGe
__vbaFpI4
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeStr
ord581
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ