82c3bdd524a019af01d699068438c21f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82c3bdd524a019af01d699068438c21f_JaffaCakes118
Size

856KB
MD5

82c3bdd524a019af01d699068438c21f
SHA1

dfd856d3660ac3bfb4cb9877f784146dc3b5fa5b
SHA256

4ab5e6402ffe5437ea22f26474a61ca49232342f80ac00c313a31baace8e61c1
SHA512

9a9e22a04ad7e0e6a09d26a0c1d9fbac0d56563341920a3b04bf4417d4453cb8fc905a764f6216edd1b08b9d863e6253cc372e4d87f24f1805eeab675f65cecc
SSDEEP

12288:fEWzdNmd20NE92pY0YHZf0ihYegIP157JeOSy/d2rMxKioeGhfW67B8qPP0Ip3WI:8sxZj9B/bxKionhu69840Ip3Imz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82c3bdd524a019af01d699068438c21f_JaffaCakes118

Files

82c3bdd524a019af01d699068438c21f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f49c5a5af6d1be9a89e4bb1aeb714b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord303
ord598
ord309
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ord645
ord648
ord570
ord571
ord685
ord100
ord611

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ