3ad2ec6f9073a76ed800fc4e5f10ece3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ad2ec6f9073a76ed800fc4e5f10ece3_JaffaCakes118
Size

26KB
MD5

3ad2ec6f9073a76ed800fc4e5f10ece3
SHA1

aee9ff559d9bb97c58a27ba6b52e77e51caabe32
SHA256

8fb76a62a2e6f87056c3e3c0967e031addf281bb6a6ea9a5b6c881d6fc123e50
SHA512

d83759c3acd374fbaac7ba219d788cd22c6212f15ae43bb90797fb57cd3675526044ca455d953ae3f9240a333ea9c7b637d5fe4eb2245d908e2eb7bb0d0fc3ab
SSDEEP

96:22u+tlnuOSDl+ExaV3nXBOW2I2OQKC3PAliGHuMJW/49T4VEdXU9UDPuZ4ny1MSt:FLt8OSpSYW2IxLJuMpLjnB93G0P2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad2ec6f9073a76ed800fc4e5f10ece3_JaffaCakes118

Files

3ad2ec6f9073a76ed800fc4e5f10ece3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c0d16eb084c88f44d7b4a143333925a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ