b221435bc385a2166eac0baab5639fdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b221435bc385a2166eac0baab5639fdb_JaffaCakes118
Size

21KB
MD5

b221435bc385a2166eac0baab5639fdb
SHA1

6f7d8589c52bc42d23d0385acb1b39ca03d9bb8e
SHA256

15128d048d1c4826f0dca200ec0e94610cbdaae4617c41740d29b30bf8b55827
SHA512

fd1626aa7b1a72049e2c20d270bee48a2d20e28163752d86906a035e7dcff9aa963880206839d4377a9bb054e84fc2722cb54325407309fa2efca8d0f920fde2
SSDEEP

384:AFuqulHTBlWz8DKZzh+e02DZ15Wm2c28G5bVuWe7dEhv/te6:TlAz8DKtgA4k28G5w7qhA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b221435bc385a2166eac0baab5639fdb_JaffaCakes118

Files

b221435bc385a2166eac0baab5639fdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ed71cd8e2a6ee539e7783bfa93acea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA

kernel32

GetSystemDirectoryA
GetWindowsDirectoryA
GetTickCount

msvbvm50

MethCallEngine
ord593
ord594
ord595
ord598
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord537
ord645
ord648
ord100
ord616
ord618
ord650

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ