31edb66ac8692bcdf294559a3be358c9_JaffaCakes118 | Triage

Sharing

General

Target

31edb66ac8692bcdf294559a3be358c9_JaffaCakes118
Size

40KB
MD5

31edb66ac8692bcdf294559a3be358c9
SHA1

ef497273d1408ee064bc43daaabc5174e1476984
SHA256

41ad6fdab4dca21a2a3be75e03e4bd05093d710bd1c438aeb590311d6bcbbc4e
SHA512

656d9ace158524f066eda026f97b4dd53fa4b153051f976f7d30b1b94c9a5876d9c1db45da647dad62b17f867b5dc37fb428d76371d05cb446c199c19942a2c5
SSDEEP

96:/lxsKO60p9D+66HgcWPuUSWsvBVIKy6WaJVsOZP88X0Op0oDLnTKp2:/TPY9D+1+LwvjIK3bsOZP8g9Ti

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31edb66ac8692bcdf294559a3be358c9_JaffaCakes118

Files

31edb66ac8692bcdf294559a3be358c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

285e3e6cccfd07a0d62f605f0423d2cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
_adj_fdiv_m32
__vbaAryDestruct
__vbaForEachCollObj
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVar
_CIsin
__vbaErase
__vbaNextEachCollObj
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
__vbaCastObjVar
_adj_fpatan
__vbaLateIdCallLd
__vbaRedim
EVENT_SINK_Release
__vbaNew
ord601
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaI4Var
__vbaLateMemCall
__vbaVarDup
_CIatan
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ