443b12e7761f34ceff6d3ddf855c6c9d_JaffaCakes118 | Triage

Sharing

General

Target

443b12e7761f34ceff6d3ddf855c6c9d_JaffaCakes118
Size

40KB
MD5

443b12e7761f34ceff6d3ddf855c6c9d
SHA1

5154b7c4e331393b11381073b92770c0cdc82dd4
SHA256

3bffdf65375cb2e6343bf5ac437c6cd756d33d12df9605e076314a4d30017f32
SHA512

8dc5b648513c21baa854f50c67396b33060d3aec005afb930dfdc45d3ce80873c950e55c987b1cb3772dd476cf0835f55ccae48c13708f28f8d09a4a2af03b1f
SSDEEP

384:/TOIyX/OEnb1bS8z24sKqrPLvxATvWt7P+Uh:/xGXL0tAE7PDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
443b12e7761f34ceff6d3ddf855c6c9d_JaffaCakes118

Files

443b12e7761f34ceff6d3ddf855c6c9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541ac51d64affe71b4d35737b8599dc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaPut3
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
ord667
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ