Behavioral task
behavioral1
Sample
df394a0337f4fc426d335df76f2ebe4e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df394a0337f4fc426d335df76f2ebe4e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df394a0337f4fc426d335df76f2ebe4e_JaffaCakes118
-
Size
25KB
-
MD5
df394a0337f4fc426d335df76f2ebe4e
-
SHA1
e87d4e903de63b854cb2fad2c02a1b09888997a7
-
SHA256
c6768c2c51d7a48f48e516785fd763d6b38c2ad8a93b77f83875657e7a686ac6
-
SHA512
1b618139634eddd77d8538978e5e42131f7cd98e908fa6dad9759b1442cc57cf7eac89cbe12624d10d5493420e970e5eb730fbc258998c5c9ce3ff95d693bd55
-
SSDEEP
192:/Tyvtxu5UvwRHxuMmNP17m1UcPlSM7XG0WJ3:/ToeOvyuMq97moM7XG0WJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df394a0337f4fc426d335df76f2ebe4e_JaffaCakes118
Files
-
df394a0337f4fc426d335df76f2ebe4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
7df2004851e1a06f9ad78b8ca765371d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaResume
__vbaError
__vbaSetSystemError
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaVargVarMove
__vbaChkstk
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
_CIsqrt
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaI4Var
__vbaStrToAnsi
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE