b1d7c73b0b8ddb31f4db0e125a1132de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1d7c73b0b8ddb31f4db0e125a1132de_JaffaCakes118
Size

41KB
MD5

b1d7c73b0b8ddb31f4db0e125a1132de
SHA1

e249b89b82f4a49a66f5c66075f158db740dcb91
SHA256

c943781334b16d51d9626318ff9f9ec583b9d8c9fc870e789a60f4407dc6a947
SHA512

f9db3473471d17ffca079c9b1ddc7829d9d915b02a320174d744f3e2dc0b1c1ca37707a0d6e1037e6f96e476253c0c2ce12bd87b01156d99bd463c77f106289e
SSDEEP

768:gar9Z/DRS3HSx/9rfnA/lAoaW6kYPfk1ZD:gwZ/DQ3+NmAoaW6pPcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1d7c73b0b8ddb31f4db0e125a1132de_JaffaCakes118

Files

b1d7c73b0b8ddb31f4db0e125a1132de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8269746f9ebb9c906782a0e23b5dbc9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ