b966dd0ccccf0e495c600d846b0b8940_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b966dd0ccccf0e495c600d846b0b8940_JaffaCakes118
Size

920KB
MD5

b966dd0ccccf0e495c600d846b0b8940
SHA1

93ac7a846c93b299bbf3dcf56a74ec8946d6de5e
SHA256

8225ac75a68a28c23acdf4d05cab61c6508dbdca8e60a7cf29afe431221e40f6
SHA512

e0c7d58b25d678d16d27b3a138ed3f6ca72eed20a1afe5662ab24dc8a7c518606fd14e7e023a36943d29c8cc47302a99ef4095f2d73b6fdb76ca4e8b1912bcd3
SSDEEP

12288:1pOAhtZuSZ54mARqv+TsvVxgI/63Nk24rDQn1/:1dH4E+4NXWUDa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b966dd0ccccf0e495c600d846b0b8940_JaffaCakes118

Files

b966dd0ccccf0e495c600d846b0b8940_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c907cd176e5729bd897d77cb68284172

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaR8FixI4
__vbaVarSub
__vbaVarTstGt
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaPut3
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
ord516
__vbaStrErrVarCopy
ord517
_adj_fprem1
ord518
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryVar
ord666
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaBoolStr
__vbaVarForInit
__vbaExitProc
ord595
__vbaStrLike
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
__vbaBoolVar
__vbaStrFixstr
__vbaBoolVarNull
__vbaRefVarAry
_CIsin
ord631
__vbaErase
ord632
ord525
__vbaVarZero
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
ord528
__vbaGenerateBoundsError
__vbaGet3
ord529
__vbaStrCmp
__vbaVarTstEq
__vbaAryConstruct2
__vbaObjVar
__vbaI2I4
DllFunctionCall
__vbaCastObjVar
__vbaRedimPreserve
__vbaLbound
_adj_fpatan
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaUI1I2
ord601
_CIsqrt
EVENT_SINK_QueryInterface
ord710
__vbaUI1I4
__vbaStr2Vec
__vbaExceptHandler
ord711
__vbaInputFile
__vbaStrToUnicode
ord712
ord713
_adj_fprem
_adj_fdivr_m64
ord607
ord608
ord716
__vbaFPException
ord717
__vbaInStrVar
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaLsetFixstrFree
__vbaI2Var
ord537
ord644
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
ord570
__vbaVar2Vec
__vbaInStr
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaI4Str
ord681
__vbaFreeStrList
ord576
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord578
ord100
__vbaVarTstNe
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarTstGe
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaFpI4
ord616
__vbaLateMemCallLd
ord617
_CIatan
__vbaAryCopy
ord618
__vbaStrMove
__vbaR8IntI4
__vbaStrVarCopy
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaAryUnlock
__vbaUI1Var
__vbaVarForNext
_CIexp
__vbaI4ErrVar
ord580
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nSJbiL
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.B1HK0E
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.x&B9ua
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.w$5ZnO
Size: 4KB - Virtual size: 4KB

.N$Y�h%
Size: 4KB - Virtual size: 4KB

.&gS-bO
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.#OnZ@I
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.UAgP.W
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.gLavrs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.KW&#n6
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.(xprtE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.Z9k&mS
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.9%3kUA
Size: 4KB - Virtual size: 4KB

.D(X=Ov
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.WEMZ-W
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.IPG=1%
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.@t9-cW
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.It3vir
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.Pc.P5k
Size: 4KB - Virtual size: 4KB

.bor1Zz
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.Fzn#TD
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.1AXlN@
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.U_W&#Z
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.g(Pgvv
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.YFE=3-
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.RGeZB3
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.DS-=4)
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.6&vU$P
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.sec##l
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.Wpi&=Z
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.-c11F7
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.PJQKM@
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

._VKyGT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.4wjF-b
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.c7cl)P
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.UI-=$_
Size: 4KB - Virtual size: 4KB

.M(cvkM
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

Sharing

General

Malware Config

Signatures

Files

c907cd176e5729bd897d77cb68284172

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 224KB - Virtual size: 222KB

.data Size: 4KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 3KB

.nSJbiL Size: 540KB - Virtual size: 540KB

.B1HK0E Size: 4KB - Virtual size: 4KB

.x&B9ua Size: 4KB - Virtual size: 4KB

.w$5ZnO Size: 4KB - Virtual size: 4KB

.N$Y�h% Size: 4KB - Virtual size: 4KB

.&gS-bO Size: 4KB - Virtual size: 4KB

.#OnZ@I Size: 4KB - Virtual size: 4KB

.UAgP.W Size: 4KB - Virtual size: 4KB

.gLavrs Size: 4KB - Virtual size: 4KB

.KW&#n6 Size: 4KB - Virtual size: 4KB

.(xprtE Size: 4KB - Virtual size: 4KB

.Z9k&mS Size: 4KB - Virtual size: 4KB

.9%3kUA Size: 4KB - Virtual size: 4KB

.D(X=Ov Size: 4KB - Virtual size: 4KB

.WEMZ-W Size: 4KB - Virtual size: 4KB

.IPG=1% Size: 4KB - Virtual size: 4KB

.@t9-cW Size: 4KB - Virtual size: 4KB

.It3vir Size: 4KB - Virtual size: 4KB

.Pc.P5k Size: 4KB - Virtual size: 4KB

.bor1Zz Size: 4KB - Virtual size: 4KB

.Fzn#TD Size: 4KB - Virtual size: 4KB

.1AXlN@ Size: 4KB - Virtual size: 4KB

.U_W&#Z Size: 4KB - Virtual size: 4KB

.g(Pgvv Size: 4KB - Virtual size: 4KB

.YFE=3- Size: 4KB - Virtual size: 4KB

.RGeZB3 Size: 4KB - Virtual size: 4KB

.DS-=4) Size: 4KB - Virtual size: 4KB

.6&vU$P Size: 4KB - Virtual size: 4KB

.sec##l Size: 4KB - Virtual size: 4KB

.Wpi&=Z Size: 4KB - Virtual size: 4KB

.-c11F7 Size: 4KB - Virtual size: 4KB

.PJQKM@ Size: 4KB - Virtual size: 4KB

._VKyGT Size: 4KB - Virtual size: 4KB

.4wjF-b Size: 4KB - Virtual size: 4KB

.c7cl)P Size: 4KB - Virtual size: 4KB

.UI-=$_ Size: 4KB - Virtual size: 4KB

.M(cvkM Size: 4KB - Virtual size: 4KB

.text
Size: 224KB - Virtual size: 222KB

.data
Size: 4KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 3KB

.nSJbiL
Size: 540KB - Virtual size: 540KB

.B1HK0E
Size: 4KB - Virtual size: 4KB

.x&B9ua
Size: 4KB - Virtual size: 4KB

.w$5ZnO
Size: 4KB - Virtual size: 4KB

.N$Y�h%
Size: 4KB - Virtual size: 4KB

.&gS-bO
Size: 4KB - Virtual size: 4KB

.#OnZ@I
Size: 4KB - Virtual size: 4KB

.UAgP.W
Size: 4KB - Virtual size: 4KB

.gLavrs
Size: 4KB - Virtual size: 4KB

.KW&#n6
Size: 4KB - Virtual size: 4KB

.(xprtE
Size: 4KB - Virtual size: 4KB

.Z9k&mS
Size: 4KB - Virtual size: 4KB

.9%3kUA
Size: 4KB - Virtual size: 4KB

.D(X=Ov
Size: 4KB - Virtual size: 4KB

.WEMZ-W
Size: 4KB - Virtual size: 4KB

.IPG=1%
Size: 4KB - Virtual size: 4KB

.@t9-cW
Size: 4KB - Virtual size: 4KB

.It3vir
Size: 4KB - Virtual size: 4KB

.Pc.P5k
Size: 4KB - Virtual size: 4KB

.bor1Zz
Size: 4KB - Virtual size: 4KB

.Fzn#TD
Size: 4KB - Virtual size: 4KB

.1AXlN@
Size: 4KB - Virtual size: 4KB

.U_W&#Z
Size: 4KB - Virtual size: 4KB

.g(Pgvv
Size: 4KB - Virtual size: 4KB

.YFE=3-
Size: 4KB - Virtual size: 4KB

.RGeZB3
Size: 4KB - Virtual size: 4KB

.DS-=4)
Size: 4KB - Virtual size: 4KB

.6&vU$P
Size: 4KB - Virtual size: 4KB

.sec##l
Size: 4KB - Virtual size: 4KB

.Wpi&=Z
Size: 4KB - Virtual size: 4KB

.-c11F7
Size: 4KB - Virtual size: 4KB

.PJQKM@
Size: 4KB - Virtual size: 4KB

._VKyGT
Size: 4KB - Virtual size: 4KB

.4wjF-b
Size: 4KB - Virtual size: 4KB

.c7cl)P
Size: 4KB - Virtual size: 4KB

.UI-=$_
Size: 4KB - Virtual size: 4KB

.M(cvkM
Size: 4KB - Virtual size: 4KB