8cfac84ecd15a6c1ed7747a0c1d9f628_JaffaCakes118

General

Target

8cfac84ecd15a6c1ed7747a0c1d9f628_JaffaCakes118
Size

288KB
MD5

8cfac84ecd15a6c1ed7747a0c1d9f628
SHA1

37b86f82db3dfd5bc164e5a9084c96958002a83b
SHA256

8811b529ed343b579aac4c9d977463a5957384323ed26abe7edb95e1706999ed
SHA512

6de097303add1908e47c76b7d2b6925f03af41e2aa2f34910031206476f6da35cdfba2157e83c7d52f0bd4816e0d2d8cd4491c8525781ea388c1672702634a0a
SSDEEP

6144:p8Cxh3P/cKXx36fgA6VBP+d2R6GJxgELe7A4Vi:uah37QE+dS6GDRLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cfac84ecd15a6c1ed7747a0c1d9f628_JaffaCakes118

Files

8cfac84ecd15a6c1ed7747a0c1d9f628_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fc93752cecd0e65fdaf79bc24e2198d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaFreeVar
__vbaAryMove
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaGenerateBoundsError
__vbaCyI2
__vbaAryConstruct2
DllFunctionCall
__vbaFpUI1
_adj_fpatan
__vbaFixstrConstruct
__vbaUI1I2
_CIsqrt
__vbaUI1I4
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord717
__vbaStrVarVal
__vbaUbound
__vbaLsetFixstrFree
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord100
__vbaAryLock
__vbaStrToAnsi
__vbaFpI2
__vbaFpI4
ord617
_CIatan
__vbaAryCopy
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3fc93752cecd0e65fdaf79bc24e2198d

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 80KB - Virtual size: 78KB

.data Size: 4KB - Virtual size: 868B

.rsrc Size: 200KB - Virtual size: 200KB

.text
Size: 80KB - Virtual size: 78KB

.data
Size: 4KB - Virtual size: 868B

.rsrc
Size: 200KB - Virtual size: 200KB