31d2ae5da7ae45edfc628bdb81ab2144_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d2ae5da7ae45edfc628bdb81ab2144_JaffaCakes118
Size

24KB
MD5

31d2ae5da7ae45edfc628bdb81ab2144
SHA1

26a788e4814784c90188317289e472ae083f6429
SHA256

429618f339d7b95061484839aad95ce8819ef448e5ff4de655dea3290d24520f
SHA512

cdaaa21ac1b8395450fea7171d82d57d784ec28835a4c59a0b459174739551e9850f169d3432122e8e533e32d6533f873a1f3470dcd6711bd5897cd73a5074a7
SSDEEP

192:7DJaUwIT8FpVDw3bmEDnDA3+Q3TVxY8W1Xepfd6GHltmbHOU3xawEx:7cUEtCncB3/YjXCfsAtDUIwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d2ae5da7ae45edfc628bdb81ab2144_JaffaCakes118

Files

31d2ae5da7ae45edfc628bdb81ab2144_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffdf67623c7b547294f70d08dda3d855

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord667
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord645
ord573
ord685
ord100
ord617
ord546

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ