1b2f3f017ffbc5a19d5fa3af2c29d4a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2f3f017ffbc5a19d5fa3af2c29d4a4_JaffaCakes118
Size

80KB
MD5

1b2f3f017ffbc5a19d5fa3af2c29d4a4
SHA1

877886db41c3183bca9b09b3d5b68593d7f26135
SHA256

936fb622facd14e42b15f59736d0f3ec0cb2c8f77dacf787ef9fbc0fe899a90e
SHA512

4d28472b5baa0efe0cc923790fb8d6ed0023cee110290b4f13b3b14eb32e8e384e5834f1e5bdaf53aead7a38f736a2de51e0b07fe114e2b0dca35a34542f8199
SSDEEP

768:TdVlE7T+As8O07lpmKsgeNuAYgqV+K7tczi8nQRFktI0l91pMq+xoAwYD8Cfx:snO094uTV+Kxcz3QRFkrtpASAgCfx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2f3f017ffbc5a19d5fa3af2c29d4a4_JaffaCakes118

Files

1b2f3f017ffbc5a19d5fa3af2c29d4a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63b3c34045b57b02a8d1b0422ccf2572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord598
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord570
ord648
ord571
ord100
ord616
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ