21bcf3d77a62006d6e9636d66eed6919_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21bcf3d77a62006d6e9636d66eed6919_JaffaCakes118
Size

21KB
MD5

21bcf3d77a62006d6e9636d66eed6919
SHA1

3d13586e9b3b9fc37b2c9d16fde4008ca5a1132c
SHA256

1bbe93f442bf70cf8af6cdd21381f5796c4904eacaee7f0a8ed81fd061c536bc
SHA512

5be04e7c2c959bf11d4c670276389d2aa7697f3eb522a2ed8e197875ea2dfa4508ab562c02d64856428d4516b9bf1cd0a6f262a9670c7c3a3bd55a20d728cffa
SSDEEP

384:bUt4azl9CA7LDqMCTIEUZ3xZDDL5CVDnAq6I:bUtVVjXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21bcf3d77a62006d6e9636d66eed6919_JaffaCakes118

Files

21bcf3d77a62006d6e9636d66eed6919_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f32518a1ba579030c03a9b9674fc2633

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord616

Sections

.
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ