5fd088fb1e8a0a31805b72e131b60c12_JaffaCakes118

General

Target

5fd088fb1e8a0a31805b72e131b60c12_JaffaCakes118
Size

684KB
MD5

5fd088fb1e8a0a31805b72e131b60c12
SHA1

6707d104897096c9476e7ea90a2b59c709c251b3
SHA256

4315748e926af0353f64becfc22e1e82dbcb00aa1f3b26dbf5a0dfb72faef836
SHA512

8824cdd47e2f9a3cbf5994872ea4a12f9da5d300cd1c0a89e7b08812cd8b8b12e2c2a495f2a6521c770d3e68bfa3b2af1215b2f38f2a1c50c846bb129ac13efc
SSDEEP

6144:2TS2SiH4QX1wbTh6zI69tUquYKqsHfphYa/7RTwBUDczbvG1gp+GYo:29dPFfFiqHUfpCW7lbwzzWgp+GB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fd088fb1e8a0a31805b72e131b60c12_JaffaCakes118

Files

5fd088fb1e8a0a31805b72e131b60c12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

121a2222ddc709065208967852031450

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaAryMove
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaRecDestruct
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord593
__vbaExitProc
ord594
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord529
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaPutOwner4
__vbaObjVar
__vbaI2I4
DllFunctionCall
__vbaStrR4
__vbaRedimPreserve
_adj_fpatan
__vbaStrR8
__vbaRedim
EVENT_SINK_Release
ord600
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord608
ord531
ord716
__vbaFPException
__vbaUbound
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaFreeStrList
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord578
ord685
ord100
__vbaVarSetVar
__vbaI4Var
ord689
__vbaVarCmpEq
__vbaLateMemCall
__vbaAryLock
__vbaStrToAnsi
__vbaVarDup
__vbaR8IntI2
_CIatan
__vbaStrMove
_allmul
_CItan
ord546
__vbaFPInt
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

121a2222ddc709065208967852031450

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 88KB - Virtual size: 86KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 588KB - Virtual size: 587KB

.text
Size: 88KB - Virtual size: 86KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 588KB - Virtual size: 587KB