876f518593fe265f0c067800c31f7307_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

876f518593fe265f0c067800c31f7307_JaffaCakes118
Size

308KB
MD5

876f518593fe265f0c067800c31f7307
SHA1

b967627f8f93cf51b9bb36bb8f8df541228b94f1
SHA256

f56722b8df69ad725f3cb80e69c44dd22218bc8618db5b8a443906f26b3c419c
SHA512

950848ebafa99b573f53c7b496add615c7b9f179437b6966dbe882c67a22f9dc4f39960fabe5b3d0aa471ee69345e552b9fb4da7c11d35e7661bcc8758feae13
SSDEEP

6144:aMUN+dCiDeZd79IPIMb6Z74Kxf1h5Z7O4uOAdIVp479Ce:aMUNYC6GwUZ/hztid

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
876f518593fe265f0c067800c31f7307_JaffaCakes118

Files

876f518593fe265f0c067800c31f7307_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4a8d93c50989ca96d8cb6b641f8165b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord100
ord581

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ