4b09fd979af8a89dba92b08e63dc5fef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b09fd979af8a89dba92b08e63dc5fef_JaffaCakes118
Size

372KB
MD5

4b09fd979af8a89dba92b08e63dc5fef
SHA1

7e50f47c6688e4db92ee6f81546d09decf93a154
SHA256

d0725d261a955c2b1591e4195ced332388b608f39b51077cd385f4ac2e30dcbd
SHA512

56e721f1d624d98fa6c9b9ad41f8f980ebb09e534ce45d07fa84fad29960f5cdc84a7aa7bb29a1f917e0089d24db985d38c4bbdad496efa867b1fefd7d696631
SSDEEP

6144:IltiDmJKiO3mo3aFSNZCb30axCboYOVJu4Awn2608W9JOPWRlgG1/M0fPVr1s:Ilt4mC313awNZCbkinfXWwn26zWzP91D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b09fd979af8a89dba92b08e63dc5fef_JaffaCakes118

Files

4b09fd979af8a89dba92b08e63dc5fef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8e4f80e60db73d7375e334a94783996

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaAryMove
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaPutOwner3
__vbaObjVar
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarSetVar
__vbaLateMemCall
__vbaVarDup
__vbaVarLateMemCallLd
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ