cc0d698c70aa7769bb03cdf3efdb5ea2_JaffaCakes118 | Triage

Sharing

General

Target

cc0d698c70aa7769bb03cdf3efdb5ea2_JaffaCakes118
Size

96KB
MD5

cc0d698c70aa7769bb03cdf3efdb5ea2
SHA1

73221d29a0405cf5e70dc413416df9d0388567bc
SHA256

401a5fc55377e5937ad3909169c36a7b2672e53e7bd111c3e718ae4cc9ea846e
SHA512

0f4a980249a257d2f274ee0c199c5ca45c8bea6f02aa787ed11bfce84a73bef778255e069c55f130d37bdec2ec1c3cb98d4329e7966497938a3427e4cb66d773
SSDEEP

1536:D7Vz5Q6aK200hQp/bIljw+H1XwJkxqgqfobV:flqt19h2luAqxJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc0d698c70aa7769bb03cdf3efdb5ea2_JaffaCakes118

Files

cc0d698c70aa7769bb03cdf3efdb5ea2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cbba464e476ef4880299333c1d4bb5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
ord512
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord705
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaObjVar
_adj_fpatan
ord677
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord530
ord531
__vbaFPException
ord536
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
ord541
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ