60dd5fc5fbdf979d37f7f6845a4b454e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60dd5fc5fbdf979d37f7f6845a4b454e_JaffaCakes118
Size

160KB
MD5

60dd5fc5fbdf979d37f7f6845a4b454e
SHA1

95cb465e22b173f3310c16956355ddf1317ea5db
SHA256

ebdd69737578bf75e0a122845c01a24d77ef0796e58d01e5f4ddc5bcec573c3c
SHA512

3957d145fd59a16d958ba7c364d121441dadca5d2d8efdc0ead2e970030f66861dc4329055a27d4957d4bad9c3e862f5e501b68e6ef3c14c42b998421edc042b
SSDEEP

3072:u/bJNnPMlXs5zt5mcxNhXy2/Sc6ovQQn/9gdDCtyIyIyIyIX:grF5KrI4E/9gNCtyIyIyIyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60dd5fc5fbdf979d37f7f6845a4b454e_JaffaCakes118

Files

60dd5fc5fbdf979d37f7f6845a4b454e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9418ce23993d59b32dedbc9cea161be9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
__vbaGenerateBoundsError
__vbaAryConstruct2
DllFunctionCall
__vbaFpUI1
_adj_fpatan
__vbaUI1I2
_CIsqrt
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaFpI2
__vbaFpI4
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ