3af398107bf3a4816b876bb9cf5f7907_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3af398107bf3a4816b876bb9cf5f7907_JaffaCakes118
Size

164KB
MD5

3af398107bf3a4816b876bb9cf5f7907
SHA1

565f8d7aab54cf0c1643357918ad49df5a43bb3a
SHA256

4814374f507934337ff02c35b8383164655b569397804fc9172393bb54ee41b1
SHA512

a4efdb66b04a0ed73cfa57f9546eb48a6b5851279be7dd13d99bddad93fde0e1179bc274d72714d391522d8fb853047b5ce328a2bbf7fcc1348b3e6942810c77
SSDEEP

3072:jWVFV7KAKKNAz3ovWVFV7KAKKNAz3oDfWVFV7KAKKNAz3ovWVFV7KAKKNAz3o:KVjWKNAFVjWKNAZVjWKNAFVjWKNA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af398107bf3a4816b876bb9cf5f7907_JaffaCakes118

Files

3af398107bf3a4816b876bb9cf5f7907_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a94599e24ed89c4a703e47297a4f1d29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ