0846672dd199f76fc06ff608a27d5718_JaffaCakes118 | Triage

Sharing

General

Target

0846672dd199f76fc06ff608a27d5718_JaffaCakes118
Size

120KB
MD5

0846672dd199f76fc06ff608a27d5718
SHA1

65e03afa30b0dbbc031b98e5f7b7f66c87c58ffd
SHA256

ae5264d014c4ff4803a22c3086b2ce94677eac07b6022c4b55326b18071b09f3
SHA512

c053404b0fea0335a7d02053ccd3c3eb849d78d02e70b62a4fad7fe96501ccaa5e31bfa6cd9c831289aa9c18f2d9249580c543dbf6a6666f4b62183211d19c7b
SSDEEP

3072:l7hqy6lFz7lyQsl73ktX+r06KGYf76G5oQkKu:RhqyKds9U1+r06K7toQkK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0846672dd199f76fc06ff608a27d5718_JaffaCakes118

Files

0846672dd199f76fc06ff608a27d5718_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

8163d275344af05a3cb3266a276dc878

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
ord519
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord599
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
__vbaR4Var
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord534
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarCmpEq
__vbaVarDup
__vbaVarCopy
_CIatan
__vbaCastObj
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ