30b156b1de1266950006426c8e953e17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30b156b1de1266950006426c8e953e17_JaffaCakes118
Size

20KB
MD5

30b156b1de1266950006426c8e953e17
SHA1

7e1aca782cbb7d450f2defa8ec2a6d8ae8535a03
SHA256

b04214bde199932c4df7507a8b9dd8e783903778409c49f6b487e53e5035e7f8
SHA512

f8a0edc179fd7b0e59eb9ec66b8ff3584f6f34c792fb650d1e9b17da595f89d80a1f3dff6a83f568291a9e8a1289dc2f2c006adbd2191d3dc8e6c3a3291b3ec3
SSDEEP

192:434V4Elu1IC94ntVdl2nhS3onAXsJn03PI:43Olu1994nHH2hS4wkkPI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30b156b1de1266950006426c8e953e17_JaffaCakes118

Files

30b156b1de1266950006426c8e953e17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54f6e32b2c7b25d3ba95c112d93d6051

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ