e969230c9cec96ab673bf2367e515a29_JaffaCakes118 | Triage

Sharing

General

Target

e969230c9cec96ab673bf2367e515a29_JaffaCakes118
Size

936KB
MD5

e969230c9cec96ab673bf2367e515a29
SHA1

750c4099bb547a9bb8cf8bd65f7e01b4bc711dd0
SHA256

bdff4cb90d969f131ade3a3235a0b8a14a3c77ed1bd33a44b3dcfb8ad9ef9960
SHA512

64f0d6866fcbbb8e4847ee484325f9b409e64fc60474d937056c0b6f15204dac63bffe2001bbfffc45b7e80f3957f90ed8c58c387cee21cd7fb6acd4b21d54a7
SSDEEP

12288:sAMJ19n+YCy6OlLb+4DveBMiP3oFcO5S9kqWZ/Oe5huzYc0dRFBUpeuLgM9hsIt9:s7J19+51mQMi/oFfSJSug3BceuUO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e969230c9cec96ab673bf2367e515a29_JaffaCakes118

Files

e969230c9cec96ab673bf2367e515a29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34bbb9bedcd2c661e98232a2919b66de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 924KB - Virtual size: 921KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ