21aa374711aeb486a95592664a6902e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21aa374711aeb486a95592664a6902e2_JaffaCakes118
Size

156KB
MD5

21aa374711aeb486a95592664a6902e2
SHA1

f2f046e8b88c64a909ef42c06fa3e13b0e00aee4
SHA256

6f3ee1c262f5f8ed6b53097133a0289cb415764cfdcfbba6934fccb6946309c7
SHA512

94f248ec472225a9b5b5252c8cd7c31c901c953c71badd27470c092ee3aea7bc7c2c0bb76bfabecf149fdeb21c376f6353c98e3b52abc53d2db5a219b6706325
SSDEEP

3072:cVdvf69EXsREgzKzpmpCJOwJ3gGRVzRoye:cVuREgzKzpmpCJ16ozaV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21aa374711aeb486a95592664a6902e2_JaffaCakes118

Files

21aa374711aeb486a95592664a6902e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7760040a4c96a7615b73f6de104d7da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord595
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord538
ord539
ord570
ord648
ord573
ord681
ord578
ord685
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ