c8a1028e5ba451a69e739f098e22662b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8a1028e5ba451a69e739f098e22662b_JaffaCakes118
Size

202KB
MD5

c8a1028e5ba451a69e739f098e22662b
SHA1

977869751fa9e3ae0eea1fe5d1e310986061ac58
SHA256

f2992aa04acbb1431c9b7d6a8611db274505c68a29edcb72b06ce55cf7931c62
SHA512

6fcd7edbb22bad777a153595daf5d9d5c70cd7355b5c681599341bd92c18a4288f5ab310d7cd8d4299b04cf38757da01d8ef7a378ea07b8f7b83229389828bfa
SSDEEP

3072:ooWrZh3tGumtIvvn80X/fiSqfKgX1jsnETEkAhwKtGKvfG4fR:zWlh3032vfWigmE4zoGG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8a1028e5ba451a69e739f098e22662b_JaffaCakes118

Files

c8a1028e5ba451a69e739f098e22662b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55b4bbe33f5436fae75288b1eef77049

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

_CIcos
_adj_fptan
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ