0fd4a74044a30e7f733d38a388c0b3d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd4a74044a30e7f733d38a388c0b3d6_JaffaCakes118
Size

260KB
MD5

0fd4a74044a30e7f733d38a388c0b3d6
SHA1

bd9e46a812ed87ebd2fe558dcbb1012a53af1478
SHA256

15f591316f82b06190e20445ee9a3031b31e072bd98f9b9af5127c0959c6d988
SHA512

b3e0f25c4cd13b5f47273138c5f6b42832925ec9d8e6f16f5e44d010252ca66fe7e5325f1cc2c4f702304287e8a5bdc9b4705ee58f3396a027f17640d9b64ba9
SSDEEP

3072:figusZowrFGz3TQtB+tHHXK7fUzJRtEJYjLlLPANRqC89Fb7gar+F2Qo4CwZFSE:KSoEFEststXKetUQNALqvoarmO4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd4a74044a30e7f733d38a388c0b3d6_JaffaCakes118

Files

0fd4a74044a30e7f733d38a388c0b3d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b8d3b5ee49bebc3455bc9565fdb7011

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 248KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ