971cc76563c113f69920fca438160b7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

971cc76563c113f69920fca438160b7b_JaffaCakes118
Size

184KB
MD5

971cc76563c113f69920fca438160b7b
SHA1

64b4afa19f360cf07a73c56cb4e9957d567147d5
SHA256

69688b887cc04f762accdf704ad653d417bfb15b05fc10195a61a2494708bfe5
SHA512

3915f07769cf0cf593a62fb09871cad3a071084f9369880fa0e3a3cdb17fce3a95352bb90481d8d705c4b0236a0d95aece88a019397bf5cfe94aa278e31a39d5
SSDEEP

3072:aRDMDCiARDPq1Bhfn+4p3CjngkU4zuZgjyAHyG38VRDMOZeVrFZv:wDMDCiyDQn1DUdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
971cc76563c113f69920fca438160b7b_JaffaCakes118

Files

971cc76563c113f69920fca438160b7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0e10932293ccfee70b921975fb19f18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord595
ord709
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord681
ord576
ord685
ord578
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 152KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�FUDFUD
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE