a72955f01a16bd9ee54c206d2ada9635_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a72955f01a16bd9ee54c206d2ada9635_JaffaCakes118
Size

28KB
MD5

a72955f01a16bd9ee54c206d2ada9635
SHA1

6a8ebb61801259b067c1ca3d4997895a69678890
SHA256

c156b616c6cbf4af8e37761ada7daeea491e01471394044aca062dacecee6d68
SHA512

5c549e0e11032c464179b4d19e2ad92532432b645f76efc47b4bcd8c35cf83efb942c5c5e66489b8523c24ed3ba48b2f6cec1029f546219c3a660ac3c6f62788
SSDEEP

192:HuQSMGPQdi5HVYA5pagFRTZCwAh9SxcmVIJKIFDUN30sqVEa:Hb8VYCailoCiRm30sna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a72955f01a16bd9ee54c206d2ada9635_JaffaCakes118

Files

a72955f01a16bd9ee54c206d2ada9635_JaffaCakes118
.exe windows:4 windows x86 arch:x86

909a0f96197096b5078c7a52b649b0e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaObjVar
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
ord612
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ