c1b0aba50c438e61f1182257e51f7e20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1b0aba50c438e61f1182257e51f7e20_JaffaCakes118
Size

36KB
MD5

c1b0aba50c438e61f1182257e51f7e20
SHA1

2d70b50c64dd4997cf777e77d1449cc12e5b821a
SHA256

735967448fb7f0b124f42398965b214efa8e5ee8187909714a3c5490e7ddd805
SHA512

3a2534445e7da54df6077ddde4a00f4c42f395e9f76683ce72faa3aa032ca158930e97043a22ad58ff3c52b316ac4ade648a3b5ee2ac1fd80073e21a2a0f90b5
SSDEEP

768:6WP2eu5OGIFZlp3CDuQMpnPMTuPzCtIXNd:6cLlpwXM5DXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1b0aba50c438e61f1182257e51f7e20_JaffaCakes118

Files

c1b0aba50c438e61f1182257e51f7e20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18ccec4caac9ac52caa2694b5cb472fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pstorec

PStoreCreateInstance

msvbvm60

ord697
MethCallEngine
ord595
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord685
ord100
ord616
ord617
ord618
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ