21712b1b8acc7d8717b7322c240e8a9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21712b1b8acc7d8717b7322c240e8a9f_JaffaCakes118
Size

120KB
MD5

21712b1b8acc7d8717b7322c240e8a9f
SHA1

d8d94eb7f8cab397383f433c7fddb72a882ee95c
SHA256

541a06c3175b33d42e665f6b537be013602ad8422d695c74ff486afbc1b6777e
SHA512

5cedc6a60749322c87f386249547ee2804938660c3df12ffd6bfc8a7e32860c026d2ef7f4ed8ab7f358541d15168ef60289d7cd89c1e5b8a5913bfa483418007
SSDEEP

1536:1h0BgrvHMut8h0x1awyLFA1Yw1241GSXpzMh:1mg7HLt8XLFA1H12AtM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21712b1b8acc7d8717b7322c240e8a9f_JaffaCakes118

Files

21712b1b8acc7d8717b7322c240e8a9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4afaa32f753d80451ce8cf859573c79f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord519
ord660
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord609
ProcCallEngine
ord535
ord536
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord685
ord100
ord611
ord612
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ