ae12e4fe85f3d8eb292f529f198e7219_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ae12e4fe85f3d8eb292f529f198e7219_JaffaCakes118
Size

692KB
MD5

ae12e4fe85f3d8eb292f529f198e7219
SHA1

063b333381b27f82d1abf3e62d9034dcd7a4c05a
SHA256

b8f231e92a614ea36a1b1ed90cd83f8af0dfa630437928ebb0b8b900e8ea6804
SHA512

380f3e1bc77dc6d585f71f5909c004df77588ecfeac0fc42a341b66cf6b79224d25b77e1302e2ea944dff8d0d7a207842eb7c1a7de278687386bae9cf541d2b2
SSDEEP

12288:YKeSUsaM+OfAPabHAwVQcBYAhmDq3cTfZb1UGQee35XalLVXApbq5KOk:YKrUsaM+OfAPabHRQmYAhmmuZxWee35f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae12e4fe85f3d8eb292f529f198e7219_JaffaCakes118

Files

ae12e4fe85f3d8eb292f529f198e7219_JaffaCakes118
.exe windows:4 windows x86 arch:x86

732db6648f7285bd6146fb6cef1ff5b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaLenBstr
__vbaLateIdCall
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFpCDblR8
__vbaVarIndexStore
__vbaFreeObjList
__vbaLineInputVar
__vbaStrErrVarCopy
_adj_fprem1
__vbaVarCmpNe
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
__vbaVargVarCopy
_adj_fdiv_m32
__vbaVarIndexLoadRefLock
__vbaVarForInit
__vbaObjSet
__vbaOnError
ord302
_adj_fdiv_m16i
ord702
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord520
ord308
__vbaRefVarAry
__vbaBoolVarNull
__vbaVarTstLt
_CIsin
__vbaErase
__vbaVarCmpGt
ord632
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaStrCmp
__vbaVarTstEq
ord560
__vbaObjVar
DllFunctionCall
__vbaVarOr
ord670
_adj_fpatan
__vbaLateIdCallLd
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
__vbaR8ErrVar
__vbaVarDiv
ord716
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaR8Str
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
ord610
__vbaVarAdd
__vbaLateMemCall
__vbaVarDup
__vbaFpI2
__vbaVarCopy
__vbaVarTstGe
__vbaVarLateMemCallLd
_CIatan
__vbaI2ErrVar
__vbaStrMove
ord619
__vbaStrVarCopy
_allmul
__vbaLateIdSt
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

732db6648f7285bd6146fb6cef1ff5b1

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 256KB - Virtual size: 256KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.adata Size: 116KB - Virtual size: 116KB

.text
Size: 256KB - Virtual size: 256KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.adata
Size: 116KB - Virtual size: 116KB