b020efd802e26751819c70c5c72dad11_JaffaCakes118 | Triage

Sharing

General

Target

b020efd802e26751819c70c5c72dad11_JaffaCakes118
Size

20KB
MD5

b020efd802e26751819c70c5c72dad11
SHA1

5bcf23017b15b5f6f1e2c9539e73a03bff8446eb
SHA256

4c74a8aad4e44cf16814baebdd2c9aafa9adb5c15b40176e89e307c354ef0f60
SHA512

f80fea98b3e01c584145860d6f9435aa4cdde650e4f3f77b2997ef3e7f0d7892ed0fd5ff4569360e3ec1438b8278faf34f656c4aedbeb0c659dd9305d381e159
SSDEEP

96:/lxBb2ZG01SagcxTbd6hXxocLtFGYK/+hT1D9SZlOckUYueOH/I2:/T84agcRp6hXx/Gj2hpD9SvI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b020efd802e26751819c70c5c72dad11_JaffaCakes118

Files

b020efd802e26751819c70c5c72dad11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cd28a1a2d3f9e1ac7600338c57c87ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
ord531
__vbaFPException
ord537
_CIlog
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ