65eccfc51b72fda29bef9df5329b8785_JaffaCakes118

General

Target

65eccfc51b72fda29bef9df5329b8785_JaffaCakes118
Size

347KB
MD5

65eccfc51b72fda29bef9df5329b8785
SHA1

487632e79cff79ee86bc177a24a383ef5f318897
SHA256

f6330a75c3932768cc14cb3a3b8444bc8d15983026ed2bf7582e699607c961e4
SHA512

9ab8a3f965418ba9985efce9739c2f015ae0b26a363dcb636f6590d0aedb48d73b62cf71e5b628039cc06826b5a18ae735ce02ba3bf18372c48576e6e915c61f
SSDEEP

6144:KLVHxUsH8mry3fAqIN6AEIPnf8c2UMDbFvebHcOXfM8:aVDc+S89TPjMvxUcOXl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65eccfc51b72fda29bef9df5329b8785_JaffaCakes118

Files

65eccfc51b72fda29bef9df5329b8785_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d79ecc8b8e60d8ab468ff9312a746130

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
__vbaGetFxStr4
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaFileCloseAll
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
__vbaStrFixstr
_CIsin
__vbaChkstk
ord526
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
_CIlog
__vbaFileOpen
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarAdd
__vbaStrToAnsi
ord616
_CIatan
__vbaStrMove
__vbaPutFxStr4
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

txnrhcu
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d79ecc8b8e60d8ab468ff9312a746130

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 52KB - Virtual size: 52KB

txnrhcu Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 52KB - Virtual size: 52KB

txnrhcu
Size: - Virtual size: 4KB