2ba4adac9fe247c24e628b44a4185ec7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ba4adac9fe247c24e628b44a4185ec7_JaffaCakes118
Size

28KB
MD5

2ba4adac9fe247c24e628b44a4185ec7
SHA1

aff9216f10ff5c212044b05a84b16af2045c2f4f
SHA256

9a3064c9820c3370026b037f6257f928e0dc21fea83bdd68c12792e08489b492
SHA512

cf6d5be1104865e3af569ced7e11e181b6ba3726086d0d137ad55bc39bfe0d93c3d5d45300a5f287c04b4e854864e9ee0840f62113b844971f6c9997419ee9c4
SSDEEP

192:/TmijOUpY4xdzjOUpY6VKOWbNreIfDF2Y9xyjOUpYJxdMjOUpYW:/TvXpVfXpTKOWbMODF2A4XpcSXp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ba4adac9fe247c24e628b44a4185ec7_JaffaCakes118

Files

2ba4adac9fe247c24e628b44a4185ec7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b37b744fa1d4cd7d81ad31383a7038c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ