2514f794e9e4d0265abbdaec983fe292_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2514f794e9e4d0265abbdaec983fe292_JaffaCakes118
Size

100KB
MD5

2514f794e9e4d0265abbdaec983fe292
SHA1

1e505fad2d05b31b42875ea3865865d04e14d540
SHA256

05ac9259e86e649f00d0c3853acf43f1b60ba1ab131bcc7f588c00986c476e72
SHA512

50062ff09996a95ea6a43953abec26d87d197577c94d2c1ee9800cb4364dd1e5bf3cdb78b9677991a3d4e687bf6d077885af1f03bf1015600260e5d87d30e92c
SSDEEP

1536:/CituznTdXtrVnVjNX9rVn1T9Xtr1H1DNXdr1HhzjSQXxLtuz/:N8rL8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2514f794e9e4d0265abbdaec983fe292_JaffaCakes118

Files

2514f794e9e4d0265abbdaec983fe292_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7e880a8c204c59275876a4564ab0daa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ