fdc5f38bb8e1bf1f614a9fce1d767ba1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdc5f38bb8e1bf1f614a9fce1d767ba1_JaffaCakes118
Size

274KB
MD5

fdc5f38bb8e1bf1f614a9fce1d767ba1
SHA1

e48cbe58340acb1af7ba83717dd2eae71c177897
SHA256

dae21b337e52dd1fcfa360d59b3210f6218eee3a7bab7590b70826a7653aeedb
SHA512

558ec604ec0ea77ea68f3e28e00ed2b20050fc16b2025e06b61e097ca48af43fd09496f761c5d800e80ce3c4b44fcae16a2b5f932cea733cfd709196a8acef0a
SSDEEP

6144:NBTRXTRXTRiohC3xj1W8UVOG3J4xBgpcI5p:TllzKxhA73em5p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdc5f38bb8e1bf1f614a9fce1d767ba1_JaffaCakes118

Files

fdc5f38bb8e1bf1f614a9fce1d767ba1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da0aa569499a23ac60bc178ff07c5350

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
ord588
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
__vbaR4Var
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaVarAdd
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ