427c38c1122847811e0e3aa3c845e2b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

427c38c1122847811e0e3aa3c845e2b9_JaffaCakes118
Size

116KB
MD5

427c38c1122847811e0e3aa3c845e2b9
SHA1

8cf6aa4704de16c8b13f501e8588e06056c4e7a1
SHA256

c959374fdeb835a448e9528bd2fbf38834131ca8942f09dc383407a63de80c09
SHA512

0e2703a0eae7e7e1e37770badf968da2be9a5782d7a575efb66d6d8b44899ff2583f39cc77cebcb254e4ec5a6fdc53cfbebfe36e4513de0597c70e116ef6fecb
SSDEEP

384:/TAzaOh+OJEQZSR0pVdEAbiVlEgVpEnibD2x3:/AUOJtZSRMVdEZVlEgVpEY2x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
427c38c1122847811e0e3aa3c845e2b9_JaffaCakes118

Files

427c38c1122847811e0e3aa3c845e2b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b9d5f1058307a39afc17781121541ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaI2I4
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ