a24a0e786c1e0673b83ed4fff9eba166_JaffaCakes118 | Triage

Sharing

General

Target

a24a0e786c1e0673b83ed4fff9eba166_JaffaCakes118
Size

687KB
MD5

a24a0e786c1e0673b83ed4fff9eba166
SHA1

361384a502ddcd27b329e8c39eac7d9753db42f4
SHA256

b620ac56c00c30c80c963f45ce7f091a12d0bb36389e776b67cfb1bc0e17cb5b
SHA512

d3a6b3ebf9a5bdd4cba708fe5c926b6c9cb5900768a36791a5d99113119c6937bfb8499f55af4c07f1c1084288284692cb0d4e3113551a23dbbdb9fe6bdec71d
SSDEEP

12288:PDbJhI6jsJlxaBYVjLjo5rD8yjSfDp4Adnbg5kUx:P5y++lbKrDsfDhbg5kUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a24a0e786c1e0673b83ed4fff9eba166_JaffaCakes118

Files

a24a0e786c1e0673b83ed4fff9eba166_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2b8d16dccd1d2248c80562ecb196a75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaPut3
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaAryDestruct
__vbaVarForInit
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
_CIsin
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaGet3
__vbaAryConstruct2
_adj_fpatan
ord600

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ