JaffaCakes118_adf97f8492a8311df1d0598b3845d9b7

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_adf97f8492a8311df1d0598b3845d9b7
Size

976KB
MD5

adf97f8492a8311df1d0598b3845d9b7
SHA1

6c372e4cb63b39e9368364bbc43edcee73d1325b
SHA256

41044ea5f085251f7eeda1b3e6d691ea1e2de6d03bacea44ebc58f7a1b702efe
SHA512

ff9680b256a2d8118c5a9ce0e07778bf48489c9413bcbdd3cf085f87d24080c3cc764cbbb316a6ce6dec86526652760bb26a32e2342e302055e9dfe342ec7761
SSDEEP

12288:6WP5l52nYibaqkQyQBuEo/P/EUACbNMhY8hpWt87fHfrtKWYpKZ:6mMmq59uEonuCb0Y4pWkfHfrtKWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_adf97f8492a8311df1d0598b3845d9b7

Files

JaffaCakes118_adf97f8492a8311df1d0598b3845d9b7
.exe windows:4 windows x86 arch:x86

a6ec9a519e78012590392100459c6b82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaR8FixI4
__vbaVarTstGt
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
ord588
__vbaStrVarMove
__vbaLenBstr
__vbaPut3
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
ord516
__vbaStrErrVarCopy
ord517
_adj_fprem1
ord518
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryVar
ord666
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaVarForInit
__vbaExitProc
ord595
__vbaStrLike
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
__vbaBoolVar
__vbaStrFixstr
__vbaBoolVarNull
__vbaRefVarAry
_CIsin
ord631
__vbaErase
ord632
ord525
__vbaVarZero
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
ord528
__vbaGenerateBoundsError
__vbaGet3
ord529
__vbaStrCmp
__vbaCyI2
__vbaVarTstEq
__vbaAryConstruct2
__vbaObjVar
__vbaI2I4
DllFunctionCall
__vbaCastObjVar
__vbaRedimPreserve
__vbaLbound
_adj_fpatan
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
ord600
ord601
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
ord710
__vbaUI1I4
__vbaStr2Vec
__vbaExceptHandler
ord711
__vbaInputFile
__vbaStrToUnicode
ord712
ord713
_adj_fprem
_adj_fdivr_m64
ord607
ord608
ord716
__vbaFPException
ord717
__vbaInStrVar
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaLsetFixstrFree
__vbaI2Var
ord537
ord644
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
ord570
__vbaVar2Vec
__vbaInStr
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
ord681
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord578
ord100
__vbaVarTstNe
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarTstGe
__vbaVarCopy
__vbaFpI4
ord616
__vbaLateMemCallLd
ord617
_CIatan
__vbaAryCopy
ord618
__vbaStrMove
__vbaR8IntI4
__vbaStrVarCopy
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaAryUnlock
__vbaUI1Var
__vbaVarForNext
_CIexp
__vbaI4ErrVar
ord580
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.JWcL&Z
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.yZP7a-
Size: 4KB - Virtual size: 4KB

.-K)GJC
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.ceCtkG
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.YQB2S.
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.A&fDx(
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.$�XMFV
Size: 4KB - Virtual size: 4KB

.J1XdOl
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.@Z-M#w
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

._c?ywK
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.&e92rw
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.GRRCA5
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.tqtATJ
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.g$ZGhb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.AAeFKQ
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.1KWO%&
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.cF0ZX-
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.OTP5ke
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.@E)FSx
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.rYpQxL
Size: 4KB - Virtual size: 4KB

.lP#pN#
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.T9UYVP
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.54O90N
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.l$IZR$
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.Tn&cZT
Size: 4KB - Virtual size: 4KB

.KN9z(i
Size: 4KB - Virtual size: 4KB

.vbp@3z
Size: 4KB - Virtual size: 4KB

.i@#-#&
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

.iNBXPD
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.&IEdO(
Size: 4KB - Virtual size: 4KB

.qvDi-1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

.NK781L
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.WJLV02
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.Xng7R6
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.#$fCth
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.IGeG=A
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

.JkB%QE
Size: 4KB - Virtual size: 4KB

Sharing

General

Malware Config

Signatures

Files

a6ec9a519e78012590392100459c6b82

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 236KB - Virtual size: 235KB

.data Size: 4KB - Virtual size: 18KB

.rsrc Size: 48KB - Virtual size: 46KB

.JWcL&Z Size: 540KB - Virtual size: 540KB

.yZP7a- Size: 4KB - Virtual size: 4KB

.-K)GJC Size: 4KB - Virtual size: 4KB

.ceCtkG Size: 4KB - Virtual size: 4KB

.YQB2S. Size: 4KB - Virtual size: 4KB

.A&fDx( Size: 4KB - Virtual size: 4KB

.$�XMFV Size: 4KB - Virtual size: 4KB

.J1XdOl Size: 4KB - Virtual size: 4KB

.@Z-M#w Size: 4KB - Virtual size: 4KB

._c?ywK Size: 4KB - Virtual size: 4KB

.&e92rw Size: 4KB - Virtual size: 4KB

.GRRCA5 Size: 4KB - Virtual size: 4KB

.tqtATJ Size: 4KB - Virtual size: 4KB

.g$ZGhb Size: 4KB - Virtual size: 4KB

.AAeFKQ Size: 4KB - Virtual size: 4KB

.1KWO%& Size: 4KB - Virtual size: 4KB

.cF0ZX- Size: 4KB - Virtual size: 4KB

.OTP5ke Size: 4KB - Virtual size: 4KB

.@E)FSx Size: 4KB - Virtual size: 4KB

.rYpQxL Size: 4KB - Virtual size: 4KB

.lP#pN# Size: 4KB - Virtual size: 4KB

.T9UYVP Size: 4KB - Virtual size: 4KB

.54O90N Size: 4KB - Virtual size: 4KB

.l$IZR$ Size: 4KB - Virtual size: 4KB

.Tn&cZT Size: 4KB - Virtual size: 4KB

.KN9z(i Size: 4KB - Virtual size: 4KB

.vbp@3z Size: 4KB - Virtual size: 4KB

.i@#-#& Size: 4KB - Virtual size: 4KB

.iNBXPD Size: 4KB - Virtual size: 4KB

.&IEdO( Size: 4KB - Virtual size: 4KB

.qvDi-1 Size: 4KB - Virtual size: 4KB

.NK781L Size: 4KB - Virtual size: 4KB

.WJLV02 Size: 4KB - Virtual size: 4KB

.Xng7R6 Size: 4KB - Virtual size: 4KB

.#$fCth Size: 4KB - Virtual size: 4KB

.IGeG=A Size: 4KB - Virtual size: 4KB

.JkB%QE Size: 4KB - Virtual size: 4KB

.text
Size: 236KB - Virtual size: 235KB

.data
Size: 4KB - Virtual size: 18KB

.rsrc
Size: 48KB - Virtual size: 46KB

.JWcL&Z
Size: 540KB - Virtual size: 540KB

.yZP7a-
Size: 4KB - Virtual size: 4KB

.-K)GJC
Size: 4KB - Virtual size: 4KB

.ceCtkG
Size: 4KB - Virtual size: 4KB

.YQB2S.
Size: 4KB - Virtual size: 4KB

.A&fDx(
Size: 4KB - Virtual size: 4KB

.$�XMFV
Size: 4KB - Virtual size: 4KB

.J1XdOl
Size: 4KB - Virtual size: 4KB

.@Z-M#w
Size: 4KB - Virtual size: 4KB

._c?ywK
Size: 4KB - Virtual size: 4KB

.&e92rw
Size: 4KB - Virtual size: 4KB

.GRRCA5
Size: 4KB - Virtual size: 4KB

.tqtATJ
Size: 4KB - Virtual size: 4KB

.g$ZGhb
Size: 4KB - Virtual size: 4KB

.AAeFKQ
Size: 4KB - Virtual size: 4KB

.1KWO%&
Size: 4KB - Virtual size: 4KB

.cF0ZX-
Size: 4KB - Virtual size: 4KB

.OTP5ke
Size: 4KB - Virtual size: 4KB

.@E)FSx
Size: 4KB - Virtual size: 4KB

.rYpQxL
Size: 4KB - Virtual size: 4KB

.lP#pN#
Size: 4KB - Virtual size: 4KB

.T9UYVP
Size: 4KB - Virtual size: 4KB

.54O90N
Size: 4KB - Virtual size: 4KB

.l$IZR$
Size: 4KB - Virtual size: 4KB

.Tn&cZT
Size: 4KB - Virtual size: 4KB

.KN9z(i
Size: 4KB - Virtual size: 4KB

.vbp@3z
Size: 4KB - Virtual size: 4KB

.i@#-#&
Size: 4KB - Virtual size: 4KB

.iNBXPD
Size: 4KB - Virtual size: 4KB

.&IEdO(
Size: 4KB - Virtual size: 4KB

.qvDi-1
Size: 4KB - Virtual size: 4KB

.NK781L
Size: 4KB - Virtual size: 4KB

.WJLV02
Size: 4KB - Virtual size: 4KB

.Xng7R6
Size: 4KB - Virtual size: 4KB

.#$fCth
Size: 4KB - Virtual size: 4KB

.IGeG=A
Size: 4KB - Virtual size: 4KB

.JkB%QE
Size: 4KB - Virtual size: 4KB