Static task
static1
Behavioral task
behavioral1
Sample
a050b728dffb38a94886d46cca8bead5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a050b728dffb38a94886d46cca8bead5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a050b728dffb38a94886d46cca8bead5_JaffaCakes118
-
Size
208KB
-
MD5
a050b728dffb38a94886d46cca8bead5
-
SHA1
584c98d0f87e9fcd2157c0062f7d6b733f2deeb6
-
SHA256
904d34fbfb4fc0724471e3d5149d57c54ed7fb93a6b1ee3c37da8ad0cf39cbdb
-
SHA512
4da8591efa0e2f3afdb2ac8d0c4a911a1d6d83144196a1a42958da83e50930344c7f2952b4d1aa8c36e5d2e954b05fbd3493424c152602186bd4d5f66facd309
-
SSDEEP
6144:DM4Cr3G6QjO4r6YLbRlrlmEcn9WnOts7:D7Cr32O4r6KRlI79ycs7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a050b728dffb38a94886d46cca8bead5_JaffaCakes118
Files
-
a050b728dffb38a94886d46cca8bead5_JaffaCakes118.exe windows:4 windows x86 arch:x86
356b54b8f217dd01089714e88a5edc9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
ord597
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
Sections
.text Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ