213ab5ef48c04d9b82d17f92aaaad87d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

213ab5ef48c04d9b82d17f92aaaad87d_JaffaCakes118
Size

88KB
MD5

213ab5ef48c04d9b82d17f92aaaad87d
SHA1

1738367ea24a4aa7bf1f6367d4bd29655eabb7ce
SHA256

24c6ac6c03b67c4540053afe9332d63751a66fa27a76b83357b71c93aeb832c7
SHA512

c9e2b5ea6105c2afe44771f061bd8c5b8ea96c89edc6e405a0ee7a1db862d17de79f9ca89aa7aaa1bf1ca9a9353cf85c7df1e19c89eeb787e3b90fc17a524117
SSDEEP

1536:0ZyQ3VgjuQS1UKIxRD+3wLkVuG3kdFK/cBBv:0oQav/xRrgVuG3sFK/cBh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213ab5ef48c04d9b82d17f92aaaad87d_JaffaCakes118

Files

213ab5ef48c04d9b82d17f92aaaad87d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06b5af53beb9a6909137362929ef1ce9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

��

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord572
ord681
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ