f6e0da49fdf6ddbafbfcb2621776b464_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6e0da49fdf6ddbafbfcb2621776b464_JaffaCakes118
Size

328KB
MD5

f6e0da49fdf6ddbafbfcb2621776b464
SHA1

0a6a31a04bb7404e225f4754cfa20a75b14073ef
SHA256

1caf29711481bf75321a8bf05e95078b93f9cebc8105c6b49d2d9e105e27c8bd
SHA512

45f27eea616c3b092f0b3e19aea203d1c26c4906f7ba0b6fa848e6c8d0e3b9c2247182065fd4b7df04f05666b6bd96378cca508290743879c56384db1c028cdd
SSDEEP

6144:D9F1tDlin4TG2G+TFGnlXjsqtl6a0zy19t:D3TjTZDklzlCJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6e0da49fdf6ddbafbfcb2621776b464_JaffaCakes118

Files

f6e0da49fdf6ddbafbfcb2621776b464_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9adffddc4ebb3f5b117b0bfd7162828a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord535
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaFpI2
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE