aedb6c6f43c6eabeb5e0d3a330fd7805_JaffaCakes118 | Triage

Sharing

General

Target

aedb6c6f43c6eabeb5e0d3a330fd7805_JaffaCakes118
Size

36KB
MD5

aedb6c6f43c6eabeb5e0d3a330fd7805
SHA1

4dd60f0b2b6ec3fa212c2613aa6fe7ae98f0da38
SHA256

aa8141acf1d328e02d4b02ddd2d71283ef8d739e15b177a29ecdb3a3718f8859
SHA512

5bb3885c49134aa9519c0ec66fa6370fa591572d35385309dc90ab2ca9e16c1261e045407a11f10bb2f065eb98933e136618bcf00c05d23b8d97554b7828289e
SSDEEP

192:/T5LJkFo0moaN23Lx/8xvsK2BHxxntILdbLMRLf:/TzkFoxPC1/8xvsKI89MRLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aedb6c6f43c6eabeb5e0d3a330fd7805_JaffaCakes118

Files

aedb6c6f43c6eabeb5e0d3a330fd7805_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aacf2047775a736ae4f17d53db905cc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaAryMove
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaPut3
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
ord631
__vbaChkstk
ord526
__vbaFileClose
__vbaGenerateBoundsError
__vbaGet3
__vbaStrCmp
DllFunctionCall
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
ord600
_CIsqrt
__vbaExceptHandler
ord713
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord570
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ