aca9506befd5d3cebd9744727c95f19f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca9506befd5d3cebd9744727c95f19f_JaffaCakes118
Size

260KB
MD5

aca9506befd5d3cebd9744727c95f19f
SHA1

b49ae32e4d165ce72965a1173717d23a8a68a16b
SHA256

fa808c78e722a6b3dc9702e455a296fd0b9ada3b049a8e2d5340ad76d3727f61
SHA512

5b387c4678d88590d49f46ecd60870d5739fb243dba7ebbd429b920d8e04e6bc84ff494bf868acbc02f50793e419ba64f0e9a401bb078707784e3307aab697fb
SSDEEP

6144:CaJsnTdMmLSJ/ChJjNwHXGny6nKNyB2jkRq8efYbxF5Lt1J0:/GdMnJ/KKXKpnky2iHewF5Ld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca9506befd5d3cebd9744727c95f19f_JaffaCakes118

Files

aca9506befd5d3cebd9744727c95f19f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b5b37775389edc1abc7a75f91ca6d8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
ord693
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaBoolStr
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ