c90b66db4d77aec46bb5850a94e38c81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c90b66db4d77aec46bb5850a94e38c81_JaffaCakes118
Size

20KB
MD5

c90b66db4d77aec46bb5850a94e38c81
SHA1

b2683fc4be6e57dd53987fa3831712684b110c63
SHA256

274d19b99cd122f0560f561bbf7423d1b449a5a361f5ccbdecdf7908c9aba5e4
SHA512

d39e6877dc8311ffcf12db3d14043abfef82af283b02c3385853109bd94f5dc5b07624fad2fa2a1f2a6031e4f4032f326814f58c9b4098728f87108ed3e234d9
SSDEEP

192:/TXxtYrvQiR5ChwCZgT8NVL41iuW2kfKTW2EEY:/TBHhwCZI87L4rW2TTW2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90b66db4d77aec46bb5850a94e38c81_JaffaCakes118

Files

c90b66db4d77aec46bb5850a94e38c81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9151b2936fc36951b9954a82102b7bc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
ord716
__vbaFPException
__vbaVarCat
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaLateMemCall
__vbaFpI2
__vbaVarCopy
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ