f07d2570ae18fb333117a61cee995176_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f07d2570ae18fb333117a61cee995176_JaffaCakes118
Size

104KB
MD5

f07d2570ae18fb333117a61cee995176
SHA1

47c3e9db77b1be517ec3085acdc8daaaffd0228c
SHA256

8f2523a8527ecaae9702783f4f38f1a3acb91fcce9a1c557bbe29f2d582df993
SHA512

5d9c9691a33ef5e9f3cdeab6ce2ef8204835083d5aa0d92794f491425ae0542ee0229859dc563b394027365475060c2fbb401f58a5b5081cc030446e2b270df6
SSDEEP

1536:mtkI1FjN4kI1VCd5SO98ZgCu3W0qTfEUMk41YoIAfMs/JJqbFb6HC:az1FZ4z1VIEFX+WVTui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07d2570ae18fb333117a61cee995176_JaffaCakes118

Files

f07d2570ae18fb333117a61cee995176_JaffaCakes118
.exe windows:4 windows x86 arch:x86

645eb8eb043bb1790ebc4f1b757e77c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaPutOwner3
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ