371b9518b95c65b85da5523d2865084d_JaffaCakes118 | Triage

Sharing

General

Target

371b9518b95c65b85da5523d2865084d_JaffaCakes118
Size

168KB
MD5

371b9518b95c65b85da5523d2865084d
SHA1

678082e822b5eee10c36cf5d8515e2b077042b94
SHA256

c572abd7958b6d6c4a42a501f8ed1603397d9014704ec60fa452306d8d738dc7
SHA512

f4e8df7fce497b49d8a0f2e4ef4a8e83c455ddc93b76fbd038b27f49f5c3d54d7e0f03a17bce7189c8a00d8342ac8f0052b3556056fefb54ba320224152af7fa
SSDEEP

3072:8IdcFLEdskgrt05bnwhVh6PTPXWR1NdK5VU:5WjZ0xCVh6SR1NM5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
371b9518b95c65b85da5523d2865084d_JaffaCakes118

Files

371b9518b95c65b85da5523d2865084d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE