f030d769fcf3abc0990af4d4b70b2dea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f030d769fcf3abc0990af4d4b70b2dea_JaffaCakes118
Size

44KB
MD5

f030d769fcf3abc0990af4d4b70b2dea
SHA1

a62c966a317db7f9d8b7c6a1a1f005c6cf6ed0b9
SHA256

f97edec38cd2a4ac597b9b4dcd4468f65e472d0e484aa1627434c2da76a4b586
SHA512

fb2e75ba8b0768455d34051a1740795a4d2fa518605c9792f50a0e17195c3bf005cf83ce4eb95adb6d46c3e29d32613f49c8dfb961827846c7ef3adc6ed25a10
SSDEEP

384:/TFt/enYwg7Z3JnTJCPubfltQ8oo8enYw/YamDgenYwkenYwgm:/8hYZ3dIYltqEh8LhXhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f030d769fcf3abc0990af4d4b70b2dea_JaffaCakes118

Files

f030d769fcf3abc0990af4d4b70b2dea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b9d6fef5598090e46826ad3e49c066e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaPutOwner3
_adj_fpatan
__vbaFixstrConstruct
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaLsetFixstrFree
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaVar2Vec
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
__vbaPutFxStr4
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ