Static task
static1
Behavioral task
behavioral1
Sample
8c6879f7aba1072f648f3c1e2140db67_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c6879f7aba1072f648f3c1e2140db67_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c6879f7aba1072f648f3c1e2140db67_JaffaCakes118
-
Size
28KB
-
MD5
8c6879f7aba1072f648f3c1e2140db67
-
SHA1
415447ea66e804cfad13cc362436539d6b1b9d13
-
SHA256
7752269a5d27d4e0c98a81238448263d396b1ee9a6692be512698f7d2535dded
-
SHA512
96b04aa801adfbf9c4a403861e0c5b180887a8c8f37ca5f9639a0c1fdea7cd6bb43cc08eacf3785834f75ae4362d80713ef7dbc6d2157d8c8a734c1bbd6d7a2a
-
SSDEEP
192:VFG3VmC6HA3YAh+Ne1uW5zBpmcaEUaRjsobpZ+gHDu46SJ:26HbAhluWRnRUGsoNDu46SJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c6879f7aba1072f648f3c1e2140db67_JaffaCakes118
Files
-
8c6879f7aba1072f648f3c1e2140db67_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ac0779bc201ca4e3e653f64909dd29d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaRecAnsiToUni
ord518
__vbaCopyBytes
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaStrFixstr
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
__vbaRecUniToAnsi
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaInStrVar
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaStrToAnsi
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord580
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ