fff62f8df3d673135ce6d57960b00bc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fff62f8df3d673135ce6d57960b00bc4_JaffaCakes118
Size

260KB
MD5

fff62f8df3d673135ce6d57960b00bc4
SHA1

a57285eac4bfaf8ac700ae8d0fa9b651365526a3
SHA256

460b3f15d8d681806da3ba5cab7a2f7e06b4550dfe8922879f2224adcef6bd3b
SHA512

d18d470a37cfe2dffcca25746d4a35ea0c2ab187e444b10b85ec39ff641f5b1ace1c98d7585b36b9f83b549ed08291375f862558e7bf65ac9a43fb10897bfc24
SSDEEP

6144:ry+WKhOJpXMG/XMG0OU2YMO+HMvKhOKPW:ry+WKhOvXt/Xt5pX0KhOKPW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fff62f8df3d673135ce6d57960b00bc4_JaffaCakes118

Files

fff62f8df3d673135ce6d57960b00bc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66008b27b385553e45b2d31ed6cc1dac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
ord593
__vbaObjSet
ord595
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaI2Var
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ