b49a7df8aa6c16a19571cb6a167b70c6_JaffaCakes118

General

Target

b49a7df8aa6c16a19571cb6a167b70c6_JaffaCakes118
Size

244KB
MD5

b49a7df8aa6c16a19571cb6a167b70c6
SHA1

bca2693d2bdf761c2b44f2bc7f30a25c54ae2963
SHA256

2d90c4e01f7fe71fce6b8a0225458adc57b06f3326a538074097af7612598c6f
SHA512

c3a6e896340d529d3afbad05dba54f870624b6f40d3291f680a14829cfe3b6b6c81cd54e3275d9f09cdd0e4074df6dc98171109f84a3374f2e9eda8609ad40aa
SSDEEP

6144:r+jQZzLnTMbnovOtA78cWYqUp4sn8I8o7c8mcE92wIR/ji+fv8ZmFcp50v+4zsvN:6jQZzLTMbovOtA78cWYqUp4K8I8o7c8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b49a7df8aa6c16a19571cb6a167b70c6_JaffaCakes118

Files

b49a7df8aa6c16a19571cb6a167b70c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdfbdb93c135eb0a70462a2f05e0f7df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaFreeObjList
_adj_fprem1
ord519
__vbaStrCat
__vbaVarCmpNe
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaLateMemSt
__vbaForEachCollObj
__vbaVarForInit
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVar
ord520
__vbaBoolVarNull
_CIsin
ord631
ord632
__vbaNextEachCollObj
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
ord560
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarOr
__vbaVarLateMemSt
__vbaCastObjVar
_adj_fpatan
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaUI1ErrVar
EVENT_SINK_Release
__vbaNew
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
ord712
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
ord607
ord608
__vbaFPException
__vbaInStrVar
ord319
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaR8Str
__vbaVarLateMemCallLdRf
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarSetObj
ord573
ord681
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaLateMemCall
ord320
__vbaVarDup
__vbaFreeVarg
ord321
__vbaVarMod
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaLateMemCallLd
__vbaVarSetObjAddref
ord617
_CIatan
__vbaStrMove
__vbaCastObj
__vbaStrVarCopy
_allmul
_CItan
ord546
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdfbdb93c135eb0a70462a2f05e0f7df

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 232KB - Virtual size: 229KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 232KB - Virtual size: 229KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 2KB