3e1fbc163b070a3ef48065bf99f756be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1fbc163b070a3ef48065bf99f756be_JaffaCakes118
Size

36KB
MD5

3e1fbc163b070a3ef48065bf99f756be
SHA1

e47c470f995fef1b52291341abc0964b0d9c1909
SHA256

05a79fe1b55be6507a78b4f2f63646787e91a5854c39c2810c65406ed0ec534f
SHA512

6f3be745a168090979c98189b7ea3d8be5895a02080f142159e693ddca3a9c1fe4b24c21290491463fe54475cf9f21a88798fa23f12c348d5060a70ea4d2687e
SSDEEP

384:+J6anUTPFYxU+zCUsNVsPknUTPFYxUf6:+JLnUTPFYpsUPknUTPFY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1fbc163b070a3ef48065bf99f756be_JaffaCakes118

Files

3e1fbc163b070a3ef48065bf99f756be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62526edd71b0ab0d7e3ca7179f5a4191

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaLateIdCall
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
__vbaBoolVar
__vbaVarTstLt
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
ord535
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ