0d37b4b485d95df1fee298ec21547964_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d37b4b485d95df1fee298ec21547964_JaffaCakes118
Size

964KB
MD5

0d37b4b485d95df1fee298ec21547964
SHA1

8373290b384bf76164921b07a2466805b7158132
SHA256

cf49a2e9ae0a2bd7c8ce8d0b0480ff5c64a51caed1f7cd5d4cd39b9098b5cc4a
SHA512

c39ca90ca32034349f135fe7474eb62e61427dd062be68d107435e27b61c641b6b6e3f4a2a2a9cba3d4eab3cad0bb055976173ac8a6dbf92bcffc528bfabc6fc
SSDEEP

12288:QU30/FVs1a2nGDtCC4kirPGWxea4A1nMykbmVxKbiVWF:F3xAd4r3eunMDeKWwF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d37b4b485d95df1fee298ec21547964_JaffaCakes118

Files

0d37b4b485d95df1fee298ec21547964_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56e799d9fdee5dc8922f7077ce0fd400

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaR8FixI4
__vbaVarTstGt
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaPut3
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
ord516
__vbaStrErrVarCopy
ord517
_adj_fprem1
ord518
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryVar
ord666
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaBoolStr
__vbaVarForInit
__vbaExitProc
ord595
__vbaStrLike
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
__vbaBoolVar
__vbaStrFixstr
__vbaBoolVarNull
__vbaRefVarAry
_CIsin
ord631
__vbaErase
ord632
ord525
__vbaVarZero
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
ord528
__vbaGenerateBoundsError
__vbaGet3
ord529
__vbaCyI2
__vbaStrCmp
__vbaVarTstEq
__vbaAryConstruct2
__vbaObjVar
__vbaI2I4
DllFunctionCall
__vbaCastObjVar
__vbaRedimPreserve
__vbaLbound
_adj_fpatan
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaUI1I2
ord601
_CIsqrt
EVENT_SINK_QueryInterface
ord710
__vbaUI1I4
__vbaStr2Vec
__vbaExceptHandler
ord711
__vbaInputFile
__vbaStrToUnicode
ord712
ord713
_adj_fprem
_adj_fdivr_m64
ord607
ord608
ord716
__vbaFPException
ord717
__vbaInStrVar
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaLsetFixstrFree
__vbaI2Var
ord537
ord644
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
ord570
__vbaVar2Vec
__vbaInStr
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaI4Str
ord681
__vbaFreeStrList
ord576
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord578
ord100
__vbaVarTstNe
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarTstGe
__vbaVarCopy
__vbaFpI4
ord616
__vbaLateMemCallLd
ord617
_CIatan
__vbaAryCopy
ord618
__vbaStrMove
__vbaR8IntI4
__vbaStrVarCopy
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaAryUnlock
__vbaUI1Var
__vbaVarForNext
_CIexp
__vbaI4ErrVar
ord580
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thwSQ(
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.6Y9tK&
Size: 4KB - Virtual size: 4KB

.r0HY$)
Size: 4KB - Virtual size: 4KB

.b3GD8d
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.#5v$Gt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.=7$e-8
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.y93JEN
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.VCBYtC
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.FE9i2R
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.0Gc)A7
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.08p%E#
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.kA-ot&
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.&D0T2k
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.#FY89z
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.?H7t)F
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.S&BXpG
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.D_r$1V
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.O#)z9y
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.keXC&&
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.$r69Bg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.@pkerv
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.$ $IzA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.n1tX6Q
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.O$Ri#F
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.8#Z)UU
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.8M3&y-
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.tOwo6%
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.dQ%T#&
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.)Tq7Un
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.&VOti2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.tXX@sH
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.Lp0$(I
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.WrZyTY
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.Hu@Dw
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.2wnIr%
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.myM@Z)
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.kcQ-TQ
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

Sharing

General

Malware Config

Signatures

Files

56e799d9fdee5dc8922f7077ce0fd400

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 224KB - Virtual size: 220KB

.data Size: 4KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 4KB

.thwSQ( Size: 580KB - Virtual size: 580KB

.6Y9tK& Size: 4KB - Virtual size: 4KB

.r0HY$) Size: 4KB - Virtual size: 4KB

.b3GD8d Size: 4KB - Virtual size: 4KB

.#5v$Gt Size: 4KB - Virtual size: 4KB

.=7$e-8 Size: 4KB - Virtual size: 4KB

.y93JEN Size: 4KB - Virtual size: 4KB

.VCBYtC Size: 4KB - Virtual size: 4KB

.FE9i2R Size: 4KB - Virtual size: 4KB

.0Gc)A7 Size: 4KB - Virtual size: 4KB

.08p%E# Size: 4KB - Virtual size: 4KB

.kA-ot& Size: 4KB - Virtual size: 4KB

.&D0T2k Size: 4KB - Virtual size: 4KB

.#FY89z Size: 4KB - Virtual size: 4KB

.?H7t)F Size: 4KB - Virtual size: 4KB

.S&BXpG Size: 4KB - Virtual size: 4KB

.D_r$1V Size: 4KB - Virtual size: 4KB

.O#)z9y Size: 4KB - Virtual size: 4KB

.keXC&& Size: 4KB - Virtual size: 4KB

.$r69Bg Size: 4KB - Virtual size: 4KB

.@pkerv Size: 4KB - Virtual size: 4KB

.$ $IzA Size: 4KB - Virtual size: 4KB

.n1tX6Q Size: 4KB - Virtual size: 4KB

.O$Ri#F Size: 4KB - Virtual size: 4KB

.8#Z)UU Size: 4KB - Virtual size: 4KB

.8M3&y- Size: 4KB - Virtual size: 4KB

.tOwo6% Size: 4KB - Virtual size: 4KB

.dQ%T#& Size: 4KB - Virtual size: 4KB

.)Tq7Un Size: 4KB - Virtual size: 4KB

.&VOti2 Size: 4KB - Virtual size: 4KB

.tXX@sH Size: 4KB - Virtual size: 4KB

.Lp0$(I Size: 4KB - Virtual size: 4KB

.WrZyTY Size: 4KB - Virtual size: 4KB

.Hu@Dw Size: 4KB - Virtual size: 4KB

.2wnIr% Size: 4KB - Virtual size: 4KB

.myM@Z) Size: 4KB - Virtual size: 4KB

.kcQ-TQ Size: 4KB - Virtual size: 4KB

.text
Size: 224KB - Virtual size: 220KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 4KB

.thwSQ(
Size: 580KB - Virtual size: 580KB

.6Y9tK&
Size: 4KB - Virtual size: 4KB

.r0HY$)
Size: 4KB - Virtual size: 4KB

.b3GD8d
Size: 4KB - Virtual size: 4KB

.#5v$Gt
Size: 4KB - Virtual size: 4KB

.=7$e-8
Size: 4KB - Virtual size: 4KB

.y93JEN
Size: 4KB - Virtual size: 4KB

.VCBYtC
Size: 4KB - Virtual size: 4KB

.FE9i2R
Size: 4KB - Virtual size: 4KB

.0Gc)A7
Size: 4KB - Virtual size: 4KB

.08p%E#
Size: 4KB - Virtual size: 4KB

.kA-ot&
Size: 4KB - Virtual size: 4KB

.&D0T2k
Size: 4KB - Virtual size: 4KB

.#FY89z
Size: 4KB - Virtual size: 4KB

.?H7t)F
Size: 4KB - Virtual size: 4KB

.S&BXpG
Size: 4KB - Virtual size: 4KB

.D_r$1V
Size: 4KB - Virtual size: 4KB

.O#)z9y
Size: 4KB - Virtual size: 4KB

.keXC&&
Size: 4KB - Virtual size: 4KB

.$r69Bg
Size: 4KB - Virtual size: 4KB

.@pkerv
Size: 4KB - Virtual size: 4KB

.$ $IzA
Size: 4KB - Virtual size: 4KB

.n1tX6Q
Size: 4KB - Virtual size: 4KB

.O$Ri#F
Size: 4KB - Virtual size: 4KB

.8#Z)UU
Size: 4KB - Virtual size: 4KB

.8M3&y-
Size: 4KB - Virtual size: 4KB

.tOwo6%
Size: 4KB - Virtual size: 4KB

.dQ%T#&
Size: 4KB - Virtual size: 4KB

.)Tq7Un
Size: 4KB - Virtual size: 4KB

.&VOti2
Size: 4KB - Virtual size: 4KB

.tXX@sH
Size: 4KB - Virtual size: 4KB

.Lp0$(I
Size: 4KB - Virtual size: 4KB

.WrZyTY
Size: 4KB - Virtual size: 4KB

.Hu@Dw
Size: 4KB - Virtual size: 4KB

.2wnIr%
Size: 4KB - Virtual size: 4KB

.myM@Z)
Size: 4KB - Virtual size: 4KB

.kcQ-TQ
Size: 4KB - Virtual size: 4KB