03da58e146d4ca91fea08e444786f06b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03da58e146d4ca91fea08e444786f06b_JaffaCakes118
Size

40KB
MD5

03da58e146d4ca91fea08e444786f06b
SHA1

0e91f05d4f81a1ed84e7393ed23d25441f82e3b5
SHA256

4ca9c16e2115c5e0315e5ddc3f81aaf31f0e42011762fbd1789b0112a5034204
SHA512

fbfc281f71e886874c07ac82066e5de09df70b684c2711e957effde6f9cdec524df1aa20d5900a26f6ebf5b79e8df4ee9bfb8fc43554e26e3c8539f90090d6bd
SSDEEP

768://MqrxtutU0U0U0U0U0U0U5NU0U0U0U0U0U0UDlU3jA2z://Mq4EjHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03da58e146d4ca91fea08e444786f06b_JaffaCakes118

Files

03da58e146d4ca91fea08e444786f06b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60809b3a9d6970166b383530da7d2850

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaVarCat
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarSetVar
__vbaLateMemCall
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ