45ca3bd12c3496c4b2736ff9d72099b1_JaffaCakes118 | Triage

Sharing

General

Target

45ca3bd12c3496c4b2736ff9d72099b1_JaffaCakes118
Size

364KB
MD5

45ca3bd12c3496c4b2736ff9d72099b1
SHA1

4b397a7a3b854b7c8978a351b91754477ec5db19
SHA256

7aa8d2b61b8bb11770a17b8c08070ada5abaf966be962d41fca207939def00b2
SHA512

b8e577d79d847a71b37bf0b5ab1bae5d7ba879d44056568c6847f57e378f40eb80aa42bfda0192a82d91afd64081d434ab98280597504d4a1e460e4c23d0dfdf
SSDEEP

6144:Jl+lJLgdW/3LDPIrdYzniDO/VMFT7TF7tOvKS0Hg3:JMwYzn6QVMFd7WUHQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45ca3bd12c3496c4b2736ff9d72099b1_JaffaCakes118

Files

45ca3bd12c3496c4b2736ff9d72099b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6d9b5922aee66ad33853dc25079dad4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
__vbaFpR8
_CIsin
__vbaChkstk
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
__vbaUI1I2
_CIsqrt
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord535
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaFpI2
__vbaFpI4
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ