0d71624b59e21f6b16bc33f01bdcf360_JaffaCakes118 | Triage

Sharing

General

Target

0d71624b59e21f6b16bc33f01bdcf360_JaffaCakes118
Size

548KB
MD5

0d71624b59e21f6b16bc33f01bdcf360
SHA1

2e57d3656c83024cbed21e623a2a35aaf0fd8e46
SHA256

92033ab41d0a52c21978eefbea86c9b4a68c89cf9cb281304430cf46672256f5
SHA512

734265cb9062562afe40520d241d867ef91224f751b3b534930e78299bcaf2a8d0ce1076bbe91e3d686545a3fadf310161b4d0ed7f0cb52c0b71ee58a035fb35
SSDEEP

12288:dYBaATz+e0Sr9d9B1W83khfw+ZNek0Vm:dnAX7TB883khfre1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d71624b59e21f6b16bc33f01bdcf360_JaffaCakes118

Files

0d71624b59e21f6b16bc33f01bdcf360_JaffaCakes118
.exe windows:4 windows x86 arch:x86

080ac5ef2d81778d1598f288000c6e12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCyForInit
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaCyI2
__vbaAryConstruct2
__vbaCyI4
__vbaPrintObj
DllFunctionCall
__vbaVarLateMemSt
_adj_fpatan
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaCyForNext
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaRecDestructAnsi
_CIatan
__vbaStrMove
__vbaI4Cy
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 532KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ