a1f4014d741cd2fdc47ef00aca220253_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1f4014d741cd2fdc47ef00aca220253_JaffaCakes118
Size

176KB
MD5

a1f4014d741cd2fdc47ef00aca220253
SHA1

e1eb542cb5860187163bbcb36a1d602cc0b993fc
SHA256

06fa0a0546bef6ded395e0078d1c21c01cd3b25ea1d1d67bee51aa4b98083507
SHA512

983028093bd77ffaa94a1a2be4fec4f7319c5786919b8946b5f54477237a89e989cfd16f1e92ab898480d306620a94baf9c5159026ee7f7744c296b99ad45cda
SSDEEP

3072:pi0zKloQSrkKgRENEI5apGTwQqVMTW0hiJD4TM4cH1+G9:J1cH1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1f4014d741cd2fdc47ef00aca220253_JaffaCakes118

Files

a1f4014d741cd2fdc47ef00aca220253_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bb3820c0f7ca98a0bd7397af35b8a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord303
ord309
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ