872da0851555e620457398a111962bf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

872da0851555e620457398a111962bf2_JaffaCakes118
Size

228KB
MD5

872da0851555e620457398a111962bf2
SHA1

15cf6a5dbc70ff2175625c4e08881d6607bfe251
SHA256

f2dbcfbe2623fc3ad5a2b8d7d87ffc07c1bb72e3c5b6209bcbf73de2e7893972
SHA512

1d7c73bcf45529611d1c8c9bfcfc92c069b7f14f4d4642dcd907011ad188860f4d8eab8e469f63c874a7b07d8fca9a29d29cf2fb7b79eb53b669ef069622fb17
SSDEEP

3072:y2X0XzIPW3kCFrWsF2eLHWPWsdZZahJXGw+MatcREqxF6snji81RUinKApRgf:tc3PFKs7H4W7+8EqxF6snji81RUinKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
872da0851555e620457398a111962bf2_JaffaCakes118

Files

872da0851555e620457398a111962bf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7257b19701dd71d1b6a9ff19d613a59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord520
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ