1be02b09609781da61ef34d260f9eebb_JaffaCakes118 | Triage

Sharing

General

Target

1be02b09609781da61ef34d260f9eebb_JaffaCakes118
Size

112KB
MD5

1be02b09609781da61ef34d260f9eebb
SHA1

486385324a50ae929bbc48a271befc945894e335
SHA256

92462f0e1298413678e94811afff61f48f853c3576ba06a00bff3cf3d2cf908f
SHA512

928a59b1775e2a5e2b25ed794cd51d5329ef037d9a48b47e9c5ef8b461e3e8fded071b4f0bebecccfb083c498ca8a3212e32b365d1e650bd61d80dd14b85d180
SSDEEP

1536:oI66jPABPMnGpyF2WoI/gblCA87rgGd8t/mkP+azhBdmNDcComj:h66jP+DpyFPBDOPnWD2mj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1be02b09609781da61ef34d260f9eebb_JaffaCakes118

Files

1be02b09609781da61ef34d260f9eebb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b729732764ed9db2301f8e4d0eafe02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaAryMove
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
ord516
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord593
ord595
__vbaObjSet

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ