c82927d6169f4d46bbb5f679801ca1cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c82927d6169f4d46bbb5f679801ca1cb_JaffaCakes118
Size

44KB
MD5

c82927d6169f4d46bbb5f679801ca1cb
SHA1

a7206f84e82c6a74549764a41592122678f300cf
SHA256

b75dafadab431c295dfdcab7c3a9fb7415b27203a4e90c5c9255e83a43b17ef8
SHA512

58d12adbe098df9a1889a60054f3540ea8d972185112c5307fb3c14ca8df7f303313b3a9aca0037299bd5cb9bdca18d25dc35499f61064b5c0d9a47b146c466a
SSDEEP

384:/TEOh/mPPD/P0PubHlgbQSbof/S9daJxqpqyLohNX9:/P/mT/c8lHSuJKqyLoh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c82927d6169f4d46bbb5f679801ca1cb_JaffaCakes118

Files

c82927d6169f4d46bbb5f679801ca1cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b85b616ab202e7c8fa3294c13e13639

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaPutOwner3
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
__vbaVar2Vec
ord648
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ