35ec0654364545b3fed558d772360831_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35ec0654364545b3fed558d772360831_JaffaCakes118
Size

1024KB
MD5

35ec0654364545b3fed558d772360831
SHA1

b384c61cdd3db4216f912b47bc8990552cdd26a4
SHA256

9905a056b5e8c80689a326358efd44caa7dbf09e213d9dc16c709e1c52433170
SHA512

5ba3369fdeedc7c9e9ef0e4621034c8c43493b87e5be0ba5a2806384798db691cd77acfddcb04ade1593b6fc76da187f2ccf1bcdff6c4d1d0928965f8f5a551b
SSDEEP

12288:UMnMhUHG23FqfImTnT5Y4gil6AFkWsL+eNMwRiryvMOwrHQu6QR60ERwBrCh5jEM:/MiL3Fq57gURsL+zwmGwrwu6SV/Ybi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35ec0654364545b3fed558d772360831_JaffaCakes118

Files

35ec0654364545b3fed558d772360831_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18bee532a8ad125120a95e7acb9938d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaBoolStr
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord705
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
ord670
ord671
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaI4Var
__vbaStrComp
__vbaVarDup
ord615
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 972KB - Virtual size: 969KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ