eef69a7ec6d1a2b10b9f094478e84d9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eef69a7ec6d1a2b10b9f094478e84d9f_JaffaCakes118
Size

837KB
MD5

eef69a7ec6d1a2b10b9f094478e84d9f
SHA1

e908d10c4494d3fba790c0f8b573b4b5a82bc578
SHA256

88359b4d64a5d4babd40d23b5e7ba6b4eb3d661c02f38b9ef97d63c9e2f343a3
SHA512

fdf2cb2c6ba9bb5182fe9de222b828953a664e2d22062ae28139056b25b55673b594e09e75c41278070a8256bedb491c73b1ba882703c2ff3896d60f046c0696
SSDEEP

12288:yl6SGEJ2fS0P9tUyByaMI1oUrhbVyxkcoV9uNofX:ylgEJ2fS0P9tlyJ0RJ2kLV9uNof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eef69a7ec6d1a2b10b9f094478e84d9f_JaffaCakes118

Files

eef69a7ec6d1a2b10b9f094478e84d9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c4d602843f54570889588b32f7af650

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 816KB - Virtual size: 814KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ