7381423c1cc33f9af57eb26b7746e5aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7381423c1cc33f9af57eb26b7746e5aa_JaffaCakes118
Size

260KB
MD5

7381423c1cc33f9af57eb26b7746e5aa
SHA1

2c870d92124f59a97d8fa37ec4cadd1e6483ca87
SHA256

2f29f1942e5fe718af03cf4bb1726ab259d0801756948cc3491e4c65a7220083
SHA512

9be606a49bd5d8b0fff2d4967cd18cd79856ce4df6b87e4e527468060db2f971b1897a21b2981ebdca0d7be948fdaa371e1d47ed321004e08c7b93d1a6ed2be3
SSDEEP

6144:oF5RhIX3aieCGLfkAk4EOstV3a35B25BRj/SBw8H:85RhohtGIzXDtVq35uveBw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7381423c1cc33f9af57eb26b7746e5aa_JaffaCakes118

Files

7381423c1cc33f9af57eb26b7746e5aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f31618ce8c99ea290ba6cdf31a1f7ed0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaPutOwner3
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarAdd
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ