eea5a710cae74f3984cd0d3722a27b21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eea5a710cae74f3984cd0d3722a27b21_JaffaCakes118
Size

16KB
MD5

eea5a710cae74f3984cd0d3722a27b21
SHA1

65e640b23a3e601ac81435397ff999b813ddb15e
SHA256

641c99460db928368c4197575da55a2ce304cc861bbea0d1cba259c8124e4cdf
SHA512

2502bcbb93c2d97d80d3084b79fc3b739793b4c8db48849d1ec7656f2334ebcb7dfc60827c73b413f581957aabc31ffc04cef0da1f26f7834a2419fbbef48210
SSDEEP

48:yOlxSfK42vU/JU5WlCJEYc9856ePwSaA/g9uFdEkFHMGP3wPNK2:/lxSZ/O59JQ9857RaAI9uHCtk2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eea5a710cae74f3984cd0d3722a27b21_JaffaCakes118

Files

eea5a710cae74f3984cd0d3722a27b21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b1dd5fb05f6937ef1b8efc1dfd53ecc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaCopyBytes
__vbaSetSystemError
ord665
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
__vbaGenerateBoundsError
__vbaAryConstruct2
DllFunctionCall
__vbaLbound
_adj_fpatan
__vbaRedim
__vbaUI1ErrVar
__vbaUI1I2
_CIsqrt
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaUbound
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaAryLock
_CIatan
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaI4ErrVar

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ