23ca7d7071c11bf786a57ffd5f9b9dfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23ca7d7071c11bf786a57ffd5f9b9dfa_JaffaCakes118
Size

180KB
MD5

23ca7d7071c11bf786a57ffd5f9b9dfa
SHA1

5705e67b0a58bd617a50c32590dab4a4851065ae
SHA256

5b7dba917ac50d0972e3e821ba747a285902c56fbe1c5af4c81d1848a54f4f8e
SHA512

6ac46ab71ac884321455275f26813112a7f8f641e16f6ddda3b990d222512fc4d3ab090f180920e27da4008445813869917494edd4c4769798f584fdc1fa7f83
SSDEEP

3072:0LTV2OROy/MJiLpM1Z3ST3G5gmNiBXJKJOd5cTk:wIOB+iuXRtyKJ+gk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23ca7d7071c11bf786a57ffd5f9b9dfa_JaffaCakes118

Files

23ca7d7071c11bf786a57ffd5f9b9dfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

884aa6295a966600cfa3cb87fce29bb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord581

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ