b16dcbd035481df1f13be241218e14ea_JaffaCakes118 | Triage

Sharing

General

Target

b16dcbd035481df1f13be241218e14ea_JaffaCakes118
Size

20KB
MD5

b16dcbd035481df1f13be241218e14ea
SHA1

fe642f83189e1b11812a8dd7ba0b78932cde9914
SHA256

2d3906ee59764be8724ef5ec7b752c3800f93008eb545a8fbea08d7e4a6ac8cb
SHA512

aafa4ff48543b0ab4d48ff191d25e0bad3b7024f932fea9dd1be903c3af9b666ffc96173381b3228d18acb4da6f67a7d3d9b14114d1aaf7dcde54a3ed2ccf3a9
SSDEEP

96:eaeuBXwvmJevAsTCmieiMBvBT3OtvhkX2Mh7UaqYh7f72irS6WmEi2:ZOOJsX1rL3OZw287Uy7jWJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b16dcbd035481df1f13be241218e14ea_JaffaCakes118

Files

b16dcbd035481df1f13be241218e14ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fdaf7c5dd918163cf248599d1d34cf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
_CIlog
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarSetVar
__vbaLateMemCall
__vbaVarLateMemCallLd
__vbaVarSetObjAddref
_CIatan
_allmul
_CItan
__vbaVarForNext
_CIexp

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ