75d06554ca12efe1531c5bff8a25c2c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75d06554ca12efe1531c5bff8a25c2c1_JaffaCakes118
Size

468KB
MD5

75d06554ca12efe1531c5bff8a25c2c1
SHA1

8179c8c1fd972cba2a8f9afba8e75880a1777ff2
SHA256

1614a8edcc48e6f1984be39ab0eacbffde8a160f031306f7d85ba805275a3591
SHA512

5a8cf80164ccc1dd2c0ede9426fefdfa3355ae275389b66d6d3fd4e1bf8740935a9ef4a629eb0ad1c4d2c8eccd5fd7c159c49956f6a98efb52cdf3a87f9496fb
SSDEEP

768:qbKTXIq/D2+toVwVwErXFMrERCsUsDtgoZPG13ol1RbqdUloEQ:qbKM0DzXFMrElUsDtDJ43mo+loE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75d06554ca12efe1531c5bff8a25c2c1_JaffaCakes118

Files

75d06554ca12efe1531c5bff8a25c2c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9e38892634d97cdc2b26fa8797a49ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj
ord580

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE