c805eedb5f5b8f122e3511092858d6bd_JaffaCakes118

General

Target

c805eedb5f5b8f122e3511092858d6bd_JaffaCakes118
Size

364KB
MD5

c805eedb5f5b8f122e3511092858d6bd
SHA1

e0d1820b4fbf0613c1dd5a516cd5dd18c0eb67e7
SHA256

f0359648da76022e454a296c1fd9da4e647c9334251598477205e88ebb5bc571
SHA512

d3af0adc7e826825a5242bc45897d6139a5bab9d3e5e431551890c5b15722b16d2eacfb4b1aa7faf66e133d6d8fd26a2bae0691725c7e67d01b7b3ba8c6d467d
SSDEEP

6144:leCu3/A9ParBPbD5UajSDsXj4tF5JKd/vytuJYNq:/yYParBDD5U/sXj4jKd/vIuJYNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c805eedb5f5b8f122e3511092858d6bd_JaffaCakes118

Files

c805eedb5f5b8f122e3511092858d6bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d90f4d07cb4e1626ab985fbc440fc35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaAryMove
__vbaLineInputStr
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
__vbaPut3
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaVarForInit
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
__vbaFpR4
__vbaFpR8
__vbaVarTstLt
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaObjVar
__vbaI2I4
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaVarCat
ord535
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarSetVar
__vbaI4Var
ord610
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
_CIatan
__vbaStrMove
__vbaAryCopy
ord542
_allmul
ord545
_CItan
ord546
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
ord580
ord581

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d90f4d07cb4e1626ab985fbc440fc35

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 36KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 320KB - Virtual size: 319KB

.text
Size: 36KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 320KB - Virtual size: 319KB