cf72af84291a389dbd7c78dfa19a3361_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf72af84291a389dbd7c78dfa19a3361_JaffaCakes118
Size

20KB
MD5

cf72af84291a389dbd7c78dfa19a3361
SHA1

1569a4e30cee63fdf367124c0eb7dcdd5b359bd6
SHA256

e8b28e462dfa1718714f8b4a25b0852a68b34a91ca4d06d33135a3e2ca109411
SHA512

808a598a46b6b119254ada32f3423c0f3570d186bf30eaae014238dc49dcfa9992c890321af176f5374ea7b1a5dcb96640e1b557d22207e47da2e2608ab39598
SSDEEP

96:/lxWLbVR5pcQcZwKGf0wc72p3h7Hm3OazfsVTiALnEf2:/TgRLlK87cK3pHm3OosQ3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf72af84291a389dbd7c78dfa19a3361_JaffaCakes118

Files

cf72af84291a389dbd7c78dfa19a3361_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2124e71e13c87b9b4f3f159e2c1847f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarSetVar
__vbaLateMemCall
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ