884a00566ae6de1dd4fc97147751fbe1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

884a00566ae6de1dd4fc97147751fbe1_JaffaCakes118
Size

192KB
MD5

884a00566ae6de1dd4fc97147751fbe1
SHA1

90789b67570f001c1a636b0e9c2400a1fdd5912a
SHA256

67896dff06759f1c4808a720b38fe4a141bea8d51cde8309b59cc79d32156304
SHA512

9ab9c687384be37fae5d92925e6fbd4b89678819984a8f4ff53d7c2f80b7b8a355fd233768892855550345e471f0f39f5be743b3ddb8daecf1f60a288f371795
SSDEEP

3072:T07WaKWqaMktz1+29XXQSbOqyWlfvIXQSbOqyw4o61Ma5IpCEtdomHk6K8bzcOF6:N2VXQgOrWl4XQgOrVMR9Hkn8bzcO2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
884a00566ae6de1dd4fc97147751fbe1_JaffaCakes118

Files

884a00566ae6de1dd4fc97147751fbe1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3704aca85dab25914823629c91aa62ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconW

msvbvm60

ord696
ord697
MethCallEngine
ord516
ord517
ord519
ord666
ord667
ord593
ord300
ord594
ord595
ord303
ord599
ord306
ord309
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord100
ord616
ord617
ord618
ord580

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc..
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE