21b44c290849320ac88e67086eee5cbc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21b44c290849320ac88e67086eee5cbc_JaffaCakes118
Size

252KB
MD5

21b44c290849320ac88e67086eee5cbc
SHA1

d6c2996faf2d1b2f49c3d8190fa8754936f02cde
SHA256

f5a148f78498b7f01ab3ac1598c19303e9fba92fe4fee2331c4016581dd077e3
SHA512

d8462f9c9320745e8f5284f635bbbf7bf80a260c702b22887be621908d0c46b678885b119ff87a53146e046ad99eea379afc2a03781ca48ec38e873ffadfdbb2
SSDEEP

1536:Tui2MJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wmTjOUn:ZX0e1FB/DpKjCLHAmTS1K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21b44c290849320ac88e67086eee5cbc_JaffaCakes118

Files

21b44c290849320ac88e67086eee5cbc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4d18b246d8dd2d8a4fc6b2b8dc9b18f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord100

Sections

.text
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ