2f0f2e4ec2bf70a05c1a4878254c921c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f0f2e4ec2bf70a05c1a4878254c921c_JaffaCakes118
Size

17KB
MD5

2f0f2e4ec2bf70a05c1a4878254c921c
SHA1

7537a9423622bccd4a1b0ee2482735e0f69139f6
SHA256

5e70f49e2ecf6bd045d000302ef78ad4eefc4a99429eec83f5820c120eddb087
SHA512

d99ec7a00bd28a32ba7427d69b6a3916b2d13e58e7f7d519e698a30bf7584b7408dd27cb6d7fa8498ce0f8cc99ba0421e105253bdbc7ed200cc3dafbdcd665bf
SSDEEP

96:e3DaJZSz1zFpHLxZNrLT7Q2n7FFjkEJ6AZME2l:auWzjHBrjQ9g5Zb2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f0f2e4ec2bf70a05c1a4878254c921c_JaffaCakes118

Files

2f0f2e4ec2bf70a05c1a4878254c921c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfab7eb169ad2ff4e42a2395ff3748ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ