d175011ba1caaf7ee633c4609739db5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d175011ba1caaf7ee633c4609739db5d_JaffaCakes118
Size

336KB
MD5

d175011ba1caaf7ee633c4609739db5d
SHA1

dd351b8df2faa20681cee99149f6da33a59f5fc4
SHA256

8716cc32710da0eca2d8e0bfb70c9d57a205eb8bbf9dda6a364d9ce443cfb4cf
SHA512

40c1cbbb41e860830ea1c796ebec07524487a73f7a568028b77ca1d365ea5da730e7e04aea0c488cfc85255a47e6e300ca94a1b7f9847d2b4c3c9fad40a1e588
SSDEEP

6144:KUP5xsyMKgO5nadiZuYZ33RlIcS9suVqEBvqdfAQ:D5g92nbuYR3FS9sYrRIfA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d175011ba1caaf7ee633c4609739db5d_JaffaCakes118

Files

d175011ba1caaf7ee633c4609739db5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

515be2614848a75b6f68d6a698924136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA

msvbvm60

ord696
ord697
ord698
MethCallEngine
ord516
ord517
ord519
ord666
ord667
ord593
ord594
ord595
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord576
ord685
ord100
ord610
ord616
ord617
ord618
ord580
ord581

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc..
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE