5feb8529b406927a492c2d8ab73c7ce1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5feb8529b406927a492c2d8ab73c7ce1_JaffaCakes118
Size

20KB
MD5

5feb8529b406927a492c2d8ab73c7ce1
SHA1

3462c4bdbb2ee40b9b17a1546f3a409ec2b14218
SHA256

cda5f607a7a7648ae84d1041e144c8d53489f9d87697648a4b636ebb7a4fea01
SHA512

82c7224bcddc2b142b3d04ae4b2c1791412265a36947c2d1b1b675561da35f43b21564ddb65a5984b98fa91dc0b5da1007aa726ff15356f5bcfb461af6431b1f
SSDEEP

96:/lxaCwAOF6tbCUSCfi/xR4IN2qqN3TkaSHG6uimPMKwN1UHmfeX/k1lfSrv4IDW+:/TeNeI71NBavXnkz+Go/SArvtDWzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5feb8529b406927a492c2d8ab73c7ce1_JaffaCakes118

Files

5feb8529b406927a492c2d8ab73c7ce1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d814c74f01d18b68b837646a990e33b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
ord525
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ