1be7685043cbba71e01c222793371c38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1be7685043cbba71e01c222793371c38_JaffaCakes118
Size

624KB
MD5

1be7685043cbba71e01c222793371c38
SHA1

a67f3c00ada04bf37051c8d88406a08e11d6f5be
SHA256

180ba67e5932f9d226c70a61448f254ccd8da487886f535262f7facd234c363b
SHA512

6d9969f7ef4b0299b5ebfe0b5a9c41c36b250abc1518108fd034c6b72b587bbf543ae6d0ab1f8e1c3384f0f39d171e3ca17e75f13bd85e3f716f284c757ebaa5
SSDEEP

6144:9jrNbOYvTS+bcoCNQgCVJA5nWIpsCdQV5rO6BTpi0v/aeInXG6Jn:POTqCCWtdQvC6BTpzZIXfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1be7685043cbba71e01c222793371c38_JaffaCakes118

Files

1be7685043cbba71e01c222793371c38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

741e783e2d73618f89dc47c6a46750af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv

msvbvm60

MethCallEngine
ord518
ord628
ord667
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord716
ord534
ProcCallEngine
ord644
ord100

Sections

.text
Size: 616KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ