31576ae9098b2a523306f8288121a824_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31576ae9098b2a523306f8288121a824_JaffaCakes118
Size

140KB
MD5

31576ae9098b2a523306f8288121a824
SHA1

6d4cf93d888a9127deb619d6f7aac357a7ac7e8d
SHA256

99cee394ea463ad59e245cbbdc0894dba4da7d9aee0bc3158ab4bc4f24174ef4
SHA512

3c288193d011b597b4171423225f514687f45e8b8ea2606ceef81a19c5f0ff38fc55f47587e2449d0b2fbface83a9eba42ba28e4f76d96d7fe7615065a4a7bbc
SSDEEP

3072:QKloQSrkKgRENEI5apGTwQqVMTW0hiJDDFbJng:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31576ae9098b2a523306f8288121a824_JaffaCakes118

Files

31576ae9098b2a523306f8288121a824_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e36e647b1d041a0dde180bfc259b3d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord644
ord537
ord573
ord100
ord619

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ