17d8a440bd010ba86058a2a4b60594db_JaffaCakes118 | Triage

Sharing

General

Target

17d8a440bd010ba86058a2a4b60594db_JaffaCakes118
Size

172KB
MD5

17d8a440bd010ba86058a2a4b60594db
SHA1

67841828663614862e2cce4979d8e46e6cc0d5fa
SHA256

8a0da4e44f0e6baae24a7ca653cfbc2efd664a2d7f9d133f6c8e0c32d8924f77
SHA512

7efed5bb76b73a75ad211126150b2977847fd02f1fbae0ad2b1b5835ca3791732afa4262e1fcd4c861f3a1ba1a8d6b772333dcb355f76ed38d70bc99f7c4d16f
SSDEEP

1536:+t7rmk7mPv6eLVOhCiGxpIp4GxkZ6ERhWm8SS2o7mBmQ0:OehOhChxpIp3xkZ6ERhWmO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d8a440bd010ba86058a2a4b60594db_JaffaCakes118

Files

17d8a440bd010ba86058a2a4b60594db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

455345189c33c2be09e9661c3d8527bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
__vbaVarDup
__vbaVarTstGe
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord580

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ