629d38d0c61e23e9d39c5db2025d7af9_JaffaCakes118 | Triage

Sharing

General

Target

629d38d0c61e23e9d39c5db2025d7af9_JaffaCakes118
Size

552KB
MD5

629d38d0c61e23e9d39c5db2025d7af9
SHA1

38ace980d763fcbc1c2138afa5a34c8bb7581ed7
SHA256

b694796fc38e342bdf4593d134779a1e89d03159b563b6814e61962e0de5dc66
SHA512

c66ba44be783c951a7eb9e979c0e9bc6a816b6e53580d6cd7a6d05ed41cfbfef42a51c8f749c54c30bc23615346c6989733acf272ea168c16d03b43388cc70b3
SSDEEP

6144:IaSW1ZCyTunR7VrZSKeXW5qnHoUOle+0lXQFlFyc/AypM1BEvh9ECjtXhalRQ6jm:IBWdanROG4IF70gEcDW1BWhOCjZYQym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
629d38d0c61e23e9d39c5db2025d7af9_JaffaCakes118

Files

629d38d0c61e23e9d39c5db2025d7af9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b6dd04cd930908a2f7c9f9d3432162c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaAryConstruct2
__vbaPrintObj
DllFunctionCall
__vbaVarLateMemSt
_adj_fpatan
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaRecDestructAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 536KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ