8ba1afdbbbd9b6f40f0fdadd2744e9d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ba1afdbbbd9b6f40f0fdadd2744e9d0_JaffaCakes118
Size

188KB
MD5

8ba1afdbbbd9b6f40f0fdadd2744e9d0
SHA1

a37d0e5123d2b13b680551d55a00be120b80d8d9
SHA256

e9e3f432c267b2fd9ab172663621842e6bc2a2fc093cc7de63401cc1f4351e7d
SHA512

d049b7d46e24cfe3cfbdeb31691b98d78551ae91415b92177a5a4253ae9dbe6bde4d6b1498199a470d1a84b0570e63e322f3e7ad549ab2e016dfa728a99271f4
SSDEEP

3072:/zdxltuD4ZRk3pu8lZXAy6uzpm1VYe5j0Y1Y:bNEDORiu0ZXAy6uzpm1VYA0Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ba1afdbbbd9b6f40f0fdadd2744e9d0_JaffaCakes118

Files

8ba1afdbbbd9b6f40f0fdadd2744e9d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2645b4ca6c328889a410682254631fac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
__vbaVarLateMemSt
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ