1661fd42a28056f5298fd96f5758db8a_JaffaCakes118 | Triage

Sharing

General

Target

1661fd42a28056f5298fd96f5758db8a_JaffaCakes118
Size

64KB
MD5

1661fd42a28056f5298fd96f5758db8a
SHA1

596824d7ff45cf545f638d82152792038ff800eb
SHA256

fb27d0214ed8604c8b644806fb7b27c0d76702dace971f2658da5082490c41f6
SHA512

e17fa4f3bc1c0c0612bb0350d229481a0032764967923b4e506210b7905bdeac6ef9db64fb5596429d12c0f88ba885c7d3578a5c403cbca67b872fdfc8068f6c
SSDEEP

768:ZEFe4Jqa1Qcsj0TQT+abNdeWeyoCMRqobb1pSJ6zYzbKxSEmQgj:ZEFDAmskQT+EzeCeqoVUJeeeSO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1661fd42a28056f5298fd96f5758db8a_JaffaCakes118

Files

1661fd42a28056f5298fd96f5758db8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bbb5846921a19d07d34f17ec1aa9774

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaLateIdCall
__vbaFreeVarList
__vbaPut3
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaGet3
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ