397702450ac5b2441da7dbf76b8703cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

397702450ac5b2441da7dbf76b8703cc_JaffaCakes118
Size

180KB
MD5

397702450ac5b2441da7dbf76b8703cc
SHA1

7d7f1b65dc69d32e219eddc697159ca154736030
SHA256

235d765f5ec5a40cd65a221d1bf2453a96a2defc591316f5dbc07eee22fae46d
SHA512

b1438e9fc5ba40a9f0c18cd03d65c46b46d69c306e09cbde57896f6c8a8c8a958217912b2476254c6c848c79626bf93b76c443fd3644622d70d404f7d3fe7cd8
SSDEEP

3072:qjcEUP0Fx0k4MWJjFalEadPFO0c6p866zn9Zx18z:qjC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397702450ac5b2441da7dbf76b8703cc_JaffaCakes118

Files

397702450ac5b2441da7dbf76b8703cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22896e36b09e10b4ceb2ce1dbd8c48bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord681
ord100

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ