6ff87bc2915ea86d1304baaefa7dd96b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ff87bc2915ea86d1304baaefa7dd96b_JaffaCakes118
Size

709KB
MD5

6ff87bc2915ea86d1304baaefa7dd96b
SHA1

800feb7d6cf2a0ddf63ebba81a4ae05718ed824f
SHA256

47513c5f2dd0b98d012acd220ac5c237e3b5bd5262dc174af3cd55d0d6845b2c
SHA512

cb9e379df65c3e67083576f333f6ffa48c1bc908c7892226df98fd59489b3bb2d71ba26d1371b135ecab1210b18ffbc56a1843405c9bebe2e75b50c79538679c
SSDEEP

12288:UfN1qMKFdDpzBUiEHR06OZ0ZgNXk0LEHfbiNosK3l:UfmMK7Ba0muwfbnsK3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff87bc2915ea86d1304baaefa7dd96b_JaffaCakes118

Files

6ff87bc2915ea86d1304baaefa7dd96b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2b8d16dccd1d2248c80562ecb196a75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaPut3
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaAryDestruct
__vbaVarForInit
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
_CIsin
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaGet3
__vbaAryConstruct2
_adj_fpatan
ord600

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ