4ca7bb4fa06e648bae93cea5fd3fd95a_JaffaCakes118

General

Target

4ca7bb4fa06e648bae93cea5fd3fd95a_JaffaCakes118
Size

432KB
MD5

4ca7bb4fa06e648bae93cea5fd3fd95a
SHA1

7ccfdb4d56e7ade2ae218abcbf82f3638b37dd79
SHA256

0ce6290d8e38f1c77fb04d9c7b581f43ecb415da0fa3e54aa46ad97f058405ac
SHA512

110912be10b14e5506911d768554d11ac4ff61dbe46674cdec2fab3d8912cbd06e747d474998c47cf65603ca0a2fd4085b2111d08be4a7b6ebdedaa09d6b2d2d
SSDEEP

12288:FOGSggGlgsQWrBZxesnU4A0QbDQKSxuWE1:AGI5sQeBbU4A0a6c1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ca7bb4fa06e648bae93cea5fd3fd95a_JaffaCakes118

Files

4ca7bb4fa06e648bae93cea5fd3fd95a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e1af60864cf8320eed0aca6b4ed1fd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
ord628
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaRefVarAry
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaAryConstruct2
ord561
DllFunctionCall
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaUI1I4
__vbaExceptHandler
__vbaStrToUnicode
ord712
_adj_fprem
_adj_fdivr_m64
__vbaR8ErrVar
__vbaVarDiv
__vbaFPException
__vbaStrVarVal
__vbaUbound
__vbaVarCat
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaVarCopy
__vbaFpI4
_CIatan
__vbaStrMove
ord618
__vbaAryCopy
__vbaStrVarCopy
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 416KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e1af60864cf8320eed0aca6b4ed1fd1

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 416KB - Virtual size: 413KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 416KB - Virtual size: 413KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 4KB