101b304209348122461cca1658963b73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

101b304209348122461cca1658963b73_JaffaCakes118
Size

104KB
MD5

101b304209348122461cca1658963b73
SHA1

0b544925a94c5658bc7aa24efe3491129288981f
SHA256

69becd6b1f7c60520fc9b24c5dc74ccc00b89fadd0e2cfbec012d04a98a8f5a1
SHA512

dcf6dd8559491b164c2ef842995834a8c5825c2beff6df47454b92dd81170030e4ab85c0d870bfca2593841c1cc73650e3aa088e74439c1d432392a2b7801072
SSDEEP

768:kraQpFTa1tNG9DymLpxlDnMESRr/wOk7WH6T2rz3Hxc0imqQhG1y6sKvMv/O:kbFTW7mpDnMEYHd6s3HxcjmbJXO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101b304209348122461cca1658963b73_JaffaCakes118

Files

101b304209348122461cca1658963b73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

928f57622014eab53d5dcb80b21c89fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord537
ord100
ord616
ord581

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ