aa92835924462c7a44546e52640bf4a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa92835924462c7a44546e52640bf4a2_JaffaCakes118
Size

632KB
MD5

aa92835924462c7a44546e52640bf4a2
SHA1

338327d86863e281e911ccec4897d90cfff897fe
SHA256

78be3fbd39c06bf344a4711f18c715e0ec26f85fa07ac586bdf3c5f1a06eba01
SHA512

3945347971e6538bfca054f6775ad56e9be5abced2d616e290073529734b08dbcc1d276657061386badb7c3fe3457549b72a004ba541fb82a5274537364eaa9f
SSDEEP

12288:YW1fjndP4ANVgO5INbKxfcdK36cu6FFjFjfIZeJXNcZXnd:YOjRPjxfc436cntwZbnd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa92835924462c7a44546e52640bf4a2_JaffaCakes118

Files

aa92835924462c7a44546e52640bf4a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58047caf91f7cb26138429cc106f0d0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW

msvbvm60

ord696
MethCallEngine
ord516
ord517
ord518
ord519
ord666
ord667
ord593
ord594
ord595
ord596
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord573
ord576
ord685
ord100
ord610
ord616
ord617
ord618
ord580
ord581

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 523KB - Virtual size: 524KB