21631da76f355767a716ac12770fbfbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21631da76f355767a716ac12770fbfbb_JaffaCakes118
Size

44KB
MD5

21631da76f355767a716ac12770fbfbb
SHA1

cfa862fe66f171afcd076df2b2330be7f10b0c84
SHA256

d697deefb572cbbbaa97d591874605beda78d015add2a4289ad61235371dfe02
SHA512

f75213695d9fac2f6520189ec94f4991bc0b555ba2c5251ff2e9034d38abc4dba39f1a4930e0424d4139ee5be85f4650d035d8f8564311f89cfdaaccc1f9cbbd
SSDEEP

384:uxP4ImLYqbMcHps/cLSEhtrmGz3MjMxjBJP1pn03Pvhy9QV5WDDV4ImLYq:uLw9Hp0cL71zFBbp+s2VwDDRw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21631da76f355767a716ac12770fbfbb_JaffaCakes118

Files

21631da76f355767a716ac12770fbfbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

367db0b84fe2a171d15aace964ba970b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord593
ord594
ord595
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord648
ord571
ord681
ord100
ord617
ord581

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ