76f3cf39fa6bfbad2d9c46d4bbcede42_JaffaCakes118 | Triage

Sharing

General

Target

76f3cf39fa6bfbad2d9c46d4bbcede42_JaffaCakes118
Size

76KB
MD5

76f3cf39fa6bfbad2d9c46d4bbcede42
SHA1

39e161f8b9d96f0ef06adb0230b3d8137fdb1dad
SHA256

b9b165a05a0af21bc64d5b63aae171c5530f09929b95b1d0fd50548dfb2d0701
SHA512

9aba92d52449a1c79fdac3b75d07e59bdc293c1ed4a692c6fc08199844ba12122555404b353a1c34d2a1a97f24dc6a6e4ee45bc4b2db93a80dbe4601ca6f5f24
SSDEEP

768:/PqVqO5Tf1CTbxn48VyDhIeiNAiE4Dbxw1CQ5TYY:/PINIvx4mcli//xhQN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76f3cf39fa6bfbad2d9c46d4bbcede42_JaffaCakes118

Files

76f3cf39fa6bfbad2d9c46d4bbcede42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69f0a73adfcd43870ec0ae3d611701bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaLateIdCall
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
DllFunctionCall
_adj_fpatan
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaLateMemCall
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ