82d9cdbdfc4de0e39db51bfc134ad5ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82d9cdbdfc4de0e39db51bfc134ad5ef_JaffaCakes118
Size

984KB
MD5

82d9cdbdfc4de0e39db51bfc134ad5ef
SHA1

9e2737093829dae2f4966b73d31e351bbc0bbbf3
SHA256

71b2e929494b0c2e0d12ffdfce64e1c653899f95a48a5e7eeee643b28ad86e1b
SHA512

c72fe178d603c89832b040d3df22293b6a70a03aa82b4a135d1a1361e8b3f9987b29a15951b41fe317f278d21f0ca3ecf8b67f0934dc48a8f33b2078659b54ab
SSDEEP

12288:uPClfBaxY8xLeIWtjXXWk6jJTnRaJCR/0aRz6mHGZ+R:RlfQx/xLfWtjXXoJTRaJo0wzdHg+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d9cdbdfc4de0e39db51bfc134ad5ef_JaffaCakes118

Files

82d9cdbdfc4de0e39db51bfc134ad5ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a61087e0e0a8019c4b6558c16aa2a540

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord660
ord666
ord595
ord596
ord598
ord520
ord522
ord524
ord631
ord709
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord531
ord717
ProcCallEngine
ord535
ord645
ord648
ord570
ord681
ord685
ord578
ord100
ord610
ord611
ord612
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 432KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ