56692637e31f46eed1d3087be41bbda9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56692637e31f46eed1d3087be41bbda9_JaffaCakes118
Size

20KB
MD5

56692637e31f46eed1d3087be41bbda9
SHA1

5c84db30c93f6c92546e2a95fff2bdd1ebdcc7cb
SHA256

0db096174478bfc0f7ab4d9e73c7285bc2596ef059826e30b7191c1168d3d171
SHA512

b91e5a70da0f6109717e78006f5a90d8780c4fcf9173d12e35ba4750a22d70dee8e2103d42541b8e0202f1fa0743be9ab1d13c00a047a187f951683aaa3f448a
SSDEEP

96:/lx3JyO7fFc4PxILA5CXkviGkG/Is37geARCbK2:/TMKfy4PWLA5A8N7VLFA4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56692637e31f46eed1d3087be41bbda9_JaffaCakes118

Files

56692637e31f46eed1d3087be41bbda9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aeff3a869c2666d0ba338406b50adb75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarAdd
__vbaVarMod
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ