9567263af5f841d50f165faf3183e657_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9567263af5f841d50f165faf3183e657_JaffaCakes118
Size

176KB
MD5

9567263af5f841d50f165faf3183e657
SHA1

5f20a02ae187fb9013cb9b4cf0964cde1ca8f723
SHA256

8170700a935ea67ae688753fcffb838d7baac67c453387356ecdd60ed967ae4c
SHA512

fdae0d5aeb70434850fe8bef92dfa6c710bad38e899edd9ba12ca1705502a7e0ee77aa79eab6f4da5cd3efb9fee1405c874e6fd826381e7bd464e502864481f1
SSDEEP

3072:nomsuX2+hVewS2Zx/oiFeJIRgztetk0qWFh7c8e6LRh:j0wSKePItHFhLBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9567263af5f841d50f165faf3183e657_JaffaCakes118

Files

9567263af5f841d50f165faf3183e657_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be5f4e96e8a879d5044a7945ab8e5b75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord660
ord595
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord568
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord571
ord573
ord578
ord685
ord100
ord610
ord612
ord613
ord616
ord617
ord618
ord619
ord650
ord546
ord581

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ