2afa0d8b9349ba770f5c4e5e0cda5bd0_JaffaCakes118 | Triage

Sharing

General

Target

2afa0d8b9349ba770f5c4e5e0cda5bd0_JaffaCakes118
Size

260KB
MD5

2afa0d8b9349ba770f5c4e5e0cda5bd0
SHA1

a1cd46219893137d02b305f94e3cec4b0777bac8
SHA256

5ee4f7e9fcc0ef5a0887440ff8139d4c3bfb49a64f68592c56b62f53c1149bef
SHA512

38774f27f6107681c082560675ad737693423bb07c688bbf146acf082504f85f954a796c984c7da51d72646f8f736719bb04700e2ca4caa36247ff0461363ec9
SSDEEP

6144:ybsEo93GOOKon+dvQMYy8q2C/w8JPSVk107:DE4GOE+5Qf82kWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2afa0d8b9349ba770f5c4e5e0cda5bd0_JaffaCakes118

Files

2afa0d8b9349ba770f5c4e5e0cda5bd0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b5b37775389edc1abc7a75f91ca6d8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
ord693
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaBoolStr
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ