87e3a310a18626d40561ccb203e1dbad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87e3a310a18626d40561ccb203e1dbad_JaffaCakes118
Size

144KB
MD5

87e3a310a18626d40561ccb203e1dbad
SHA1

afd2bbe94e885b8e1d1b9bdc127bb77a7029e2db
SHA256

d8cf80b22b8f9f72148ba289cea4f76692b3cffffd1bf4081910541fe163aee1
SHA512

b4faf70bac2182d6eb5b170e810f2c08b3a36ba035cbea3a7d723873974be5a0ae448ae8770c1918c7a6ac2c3d1ae53fcbf1c9a0f2b9a6ea69e8cc14cf226dc0
SSDEEP

3072:KcUcm0X3qDOUwUNvo8Hj/64qDuibRF+phTjJfsc:KcUK3qDpvTT6LDuibf+phTjJE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e3a310a18626d40561ccb203e1dbad_JaffaCakes118

Files

87e3a310a18626d40561ccb203e1dbad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2ba1e6021ee51caa7059c5e0d62d110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord100
ord617

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE