4a8a16942adeb422ee3cfb0c65385ab8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a8a16942adeb422ee3cfb0c65385ab8_JaffaCakes118
Size

96KB
MD5

4a8a16942adeb422ee3cfb0c65385ab8
SHA1

d0eb43990db2a5a6a23212c37ea54e068250cbba
SHA256

c13653aa7e113cd03b05ad673760474992df0431c3ba57897c8b3354265b200a
SHA512

aac08b3b56efea564e0b2138335c40f3d387f435bf3aa9c66c2bf4025f5e80e75b2b7d252de82afcad3e699577b1d90caa3c50bd68e5b47842e62740cded4d20
SSDEEP

1536:Z8Ifak5x48woHFG3jN05VTFlcTR9VnzHCZKS/Hu84+vmo8C4/PbRt8hw3fvoXAx:/xfbcF9VnDCZR/O/o8J/DRwYfvSAx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a8a16942adeb422ee3cfb0c65385ab8_JaffaCakes118

Files

4a8a16942adeb422ee3cfb0c65385ab8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac760b8a38e4dfe06f2b62a3ec6a0b3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaAryMove
__vbaGosubReturn
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
ord516
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord631
__vbaErase
__vbaVarZero
ord632
__vbaChkstk
__v
ord713
ord607
ord608
ord717
ord644
ord573
ord681
ord100
ord616
ord618

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ