Static task
static1
Behavioral task
behavioral1
Sample
8cbd11402b154ff52b0ee58b89f61513_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8cbd11402b154ff52b0ee58b89f61513_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cbd11402b154ff52b0ee58b89f61513_JaffaCakes118
-
Size
32KB
-
MD5
8cbd11402b154ff52b0ee58b89f61513
-
SHA1
b3c31d50b030a2b60499aa884306b52181f4b8ef
-
SHA256
2add5c095a40d4d432027e12526e9ecad6f0be5408e94280f77a1fe637ca9580
-
SHA512
7187846cbff1c4c4fc6f440349fd9518dc918b48d4f3bf8db1b19aeaf90c484fe00ba5fec2e90edf6de5b8052057b258a950817a41d11f6fcbf69dc111f5cadf
-
SSDEEP
384:1oc7lnR0zpheSgFZh2s6q9LQfL4dqUzy2XWqzDSDG4/pRM:1ochRk0SUZh719LQfL4jS+I7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cbd11402b154ff52b0ee58b89f61513_JaffaCakes118
Files
-
8cbd11402b154ff52b0ee58b89f61513_JaffaCakes118.exe windows:4 windows x86 arch:x86
afcf8558a101262405ff5e8221a4f53b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaAryMove
__vbaGosubReturn
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord631
__vbaErase
__vbaVarZero
__vbaChkstk
__vbaGosubFree
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__
ord670
ord711
ord607
ord717
ord644
ord570
ord573
ord100
ord616
ord618
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 144.6MB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ