JaffaCakes118_6b8935f5ca6eca38ec07b4742c8d9ad0 | Triage

Sharing

General

Target

JaffaCakes118_6b8935f5ca6eca38ec07b4742c8d9ad0
Size

284KB
MD5

6b8935f5ca6eca38ec07b4742c8d9ad0
SHA1

8b629ea2e0b2242e5d371746326ed6e05f29fbdd
SHA256

75a12375c8b6add1284b1a951437aabb48155a2d96557bd00c86eed9c1488c4a
SHA512

06d620a3c56b254c6a086936fafd60e124ce50ce983acb60154727a4644f3272784308f6b3b85bef0f8475a812d27ca901853fbff5f41122f1a40f68725cf0b5
SSDEEP

6144:mfurybDX0Ab80kHNj08bYmwnZcMjKyKcb:CuryXX0Ab8x8/T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6b8935f5ca6eca38ec07b4742c8d9ad0

Files

JaffaCakes118_6b8935f5ca6eca38ec07b4742c8d9ad0
.exe windows:4 windows x86 arch:x86

467a28c871e51e82bcc66cbaeca3e4be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
ord629
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
ord594
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
ord599
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
__vbaGet4
DllFunctionCall
__vbaRedimPreserve
ord673
_adj_fpatan
ord675
ord676
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord538
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaAryLock
ord615
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ