265f0e1621b2fe2eddfd603a524bcc42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

265f0e1621b2fe2eddfd603a524bcc42_JaffaCakes118
Size

37KB
MD5

265f0e1621b2fe2eddfd603a524bcc42
SHA1

b0d0fc6b9cc0962398a0ed2117e79b606e176a59
SHA256

f6cc4fcdb417b3cc50ae8b3e565b9aaa0ce8054f7b74bd9f641883281e84836a
SHA512

a3055d7cbbec6cdb5e6565c149ad9553175d6c5a906f3b19a348bfd67d573e28cf89389d6f1c23154cb185a6cd6b3a40df4454587f07055d15ed52d8e1a588d5
SSDEEP

768:/1cswxG2XxdeVzk/EVQXFIhizpbfQGgF2O+:/PwU2B0VAKQRzpbZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
265f0e1621b2fe2eddfd603a524bcc42_JaffaCakes118

Files

265f0e1621b2fe2eddfd603a524bcc42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58e807cfd26ea858e8a4840634dfa788

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE