Static task
static1
Behavioral task
behavioral1
Sample
60f5419e236e227cd8d3cdccc37eb77b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60f5419e236e227cd8d3cdccc37eb77b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60f5419e236e227cd8d3cdccc37eb77b_JaffaCakes118
-
Size
376KB
-
MD5
60f5419e236e227cd8d3cdccc37eb77b
-
SHA1
fe338af9e6dc11b54a03d579b0b2181fdf09b04b
-
SHA256
de51130f1ef97c3d1389c5b1bc56c6967697906864e3da6e7fbda92405faef77
-
SHA512
abdf4661c43c029bcb7b12e8667c5cab691a5811a5e831da3af34725e582df63e1de1091e764cc7ce39e4d3c90d266ded5728f3ae9ac92039b976b37125622d7
-
SSDEEP
6144:Elx0Dcq0MMMZzMMM1Pr3LUjnX6USaAukOW9xxxxxxxpMMMZzMMMDzMMMTMMMk4r9:EjMMMZMMM1Pr3LUjKUDNmxxxxxxxpMMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60f5419e236e227cd8d3cdccc37eb77b_JaffaCakes118
Files
-
60f5419e236e227cd8d3cdccc37eb77b_JaffaCakes118.exe windows:4 windows x86 arch:x86
dac2cca559d85cc56908dce0d8371962
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaLateIdCall
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaPutOwner3
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaFixstrConstruct
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaUbound
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
__vbaInStr
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaVarDup
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
Sections
.text Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ