968eef8e3cedffea43f45afda5adfe1f_JaffaCakes118 | Triage

Sharing

General

Target

968eef8e3cedffea43f45afda5adfe1f_JaffaCakes118
Size

186KB
MD5

968eef8e3cedffea43f45afda5adfe1f
SHA1

0d9c4fb3ea4c80ee7ecdae3b9fa116c3178b96a8
SHA256

46680f6565fb0f5e50aa73248ab38dab03ba70b46aa9f359ce4245cc74b661bb
SHA512

9336172285e6461178cd07aae66d7ce78955a3111e42612f27fa75551df798fb8d1a41b820908533d9ac9d9ded9f0e6569844f83faf14c208c61a4381dc7673c
SSDEEP

3072:R1frIEFhlyr5G7M1G/dMoOufM9EZFlFziVq3wLe/fUIcBx7z66MmUK9BStTxAHY:3fRiwV18t2Z9zWq3wL5IUz66MmUWBMxg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
968eef8e3cedffea43f45afda5adfe1f_JaffaCakes118

Files

968eef8e3cedffea43f45afda5adfe1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b42ce086dd1c6f33478cb0da8f289e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
DllFunctionCall
__vbaRedimPreserve
_adj_fpatan
__vbaUI1I2
_CIsqrt
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord535
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaI4Str
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaAryLock
__vbaFpI2
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ