b99ec714f886af8ac6bda4a8d25816eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b99ec714f886af8ac6bda4a8d25816eb_JaffaCakes118
Size

114KB
MD5

b99ec714f886af8ac6bda4a8d25816eb
SHA1

d4039637cf2d47c78c9ff4675f81088e899cb532
SHA256

93cc3a5b5b2a16f3da960a82b17644f6623fd59d6cb0152434f508969b32f7bf
SHA512

0c7c6594dd3da25687b38cb51309e74417bbb93aef4bc8281081187042f49c52c2ac75035fd0ab9c79fb7ab820b056a1cdd3646d82470ca73073f426c52b8166
SSDEEP

3072:zZUseAv3op6uxbl1ECDqERqEr8+g4wgpnNjdKmSG:zZUA3oEObLECDPRqoVNcG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b99ec714f886af8ac6bda4a8d25816eb_JaffaCakes118

Files

b99ec714f886af8ac6bda4a8d25816eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8269746f9ebb9c906782a0e23b5dbc9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ