23242e553620f82c507d8387a756862f_JaffaCakes118 | Triage

Sharing

General

Target

23242e553620f82c507d8387a756862f_JaffaCakes118
Size

84KB
MD5

23242e553620f82c507d8387a756862f
SHA1

bf1e3fe006e9bf023adcd7f9490cbdc7d57c13ae
SHA256

8a4ddcde628c6744a4a89a7f1256ede7bd800d97b5c1f20d2cf123dfe2289029
SHA512

b73fc56c3064f7efaa3e2fd39f439a287b640857b1089618534b0344cc641680af0a9b83c78a14437dc750e82523c6ccf5cf9ab2f4b9fbb85a0e81a9d2357b94
SSDEEP

1536:LNgMJeV/7ecF6EWtelFBkhtJoqga8D2P4GEfe+Vj+U:LNgUeV/ScFKelFR84GEfe+Vj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23242e553620f82c507d8387a756862f_JaffaCakes118

Files

23242e553620f82c507d8387a756862f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd99a16de34e09dee5b45344a46e7808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord695
ord696
MethCallEngine
ord516
ord519
ord626
ord660
ord666
ord667
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
ord670
ord568
ord569
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord714
ord608
ord716
ord531
ord532
ProcCallEngine
ord537
ord644
ord539
ord570
ord648
ord681
ord577
ord578
ord685
ord100
ord689
ord616
ord617
ord619
ord546
ord580
ord581

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ