ceee941cd52234e4ac93154bb1386395_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ceee941cd52234e4ac93154bb1386395_JaffaCakes118
Size

1.8MB
MD5

ceee941cd52234e4ac93154bb1386395
SHA1

e2fa2844efdb9284118db1a2068b244ffee5fc2a
SHA256

5483accf9244563cbdb0d58bdcef67dc19e412e06a3004a9c8e44dfe397e3398
SHA512

80fb9f6e1038bc652d18ad52ef4886615e31df6f39cf5603c0361ac6f697533d85f4c0dfd0f9568f66f9982bc779141cfa0f013c9fd47052da51709e47c5c2ef
SSDEEP

49152:qSJJK5JdEBapLmj4zTR/jbvVUdVdRvNdr:qSJJi+Iw0R/j7ydHJDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ceee941cd52234e4ac93154bb1386395_JaffaCakes118

Files

ceee941cd52234e4ac93154bb1386395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b8d3b5ee49bebc3455bc9565fdb7011

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ