648886373db77636474d6f476f049078_JaffaCakes118 | Triage

Sharing

General

Target

648886373db77636474d6f476f049078_JaffaCakes118
Size

132KB
MD5

648886373db77636474d6f476f049078
SHA1

c75f7999946f8baa874b70059e381bf7a0869ae6
SHA256

75f57925bcc511e5241059a2cc340f81400204b3c7ecded1458b847351444ffc
SHA512

39f94d4a3a375c4a131b448dad11726b6499a24405e7240dcc05156d6643a24014810356ae255ed1e3d5155d0e5f1ae773c5415a508fea8d3eeb4760fb87156f
SSDEEP

1536:wEENd5aQyW0mH+KS1j870qCoNRDj870q:AYQL1ZqoPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
648886373db77636474d6f476f049078_JaffaCakes118

Files

648886373db77636474d6f476f049078_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34473a5f4f96fc4e3b6856c9803afa2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaFreeVar
__vbaAryMove
__vbaLenBstr
ord696
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
ord628
__vbaStrCat
__vbaLenBstrB
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaLateMemCall
_CIatan
__vbaAryCopy
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ