fd65738e6463275d875f51ac1c3c11b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd65738e6463275d875f51ac1c3c11b3_JaffaCakes118
Size

88KB
MD5

fd65738e6463275d875f51ac1c3c11b3
SHA1

2dcde3f80e650df18bd6473f76019647102cbb01
SHA256

c718bcfec06b7c22b5b5a0b1b6df1dff85a09e73c20c1b1eac450b2c56f5edef
SHA512

eeec74c7314566b6faf53d37f71de68ae1f84ab66e563e573e097747afc249179ec4313d8cedf00cc64159f9dece958a5eb41916bb85a29379e968ff4b0ff875
SSDEEP

1536:/qV+1FZ8xyGHwz5CkyDVmi378KaSkFOZz1lvk+6C1Hc:iyM6WAFOZz1xGCRc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd65738e6463275d875f51ac1c3c11b3_JaffaCakes118

Files

fd65738e6463275d875f51ac1c3c11b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

655fbe724e7e1268b224f144b926d591

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaLateIdCall
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaObjVar
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaLateMemCall
ord612
__vbaVarLateMemCallLd
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE