d1d0435b9ad0eb119dfadf986f792e55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1d0435b9ad0eb119dfadf986f792e55_JaffaCakes118
Size

205KB
MD5

d1d0435b9ad0eb119dfadf986f792e55
SHA1

13f90d33117da6acf64cb7f9294063f548198144
SHA256

8b64d4552da4161412a6ed30b2b4b285c0eebe986d2144162494e635af2c45fe
SHA512

0f1d85e907decee2c497d4bae40dc2b9c7280bdb61df9be40bdfd35bf0a269976ad70e9da7e5f272510daa2f7bfbf11fe76ad4b4a3b2d3628f90dbb17a2e48ac
SSDEEP

3072:LqhMPssRhlARSOsdwD/98out3SDADeak7dJHB/AKG:LqhMPssRARoiSoS3SsQLH5AK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1d0435b9ad0eb119dfadf986f792e55_JaffaCakes118

Files

d1d0435b9ad0eb119dfadf986f792e55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8767f78a3f29bbe05ebe31e0976cc66c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord553
ord669
ord593
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord717
ProcCallEngine
ord645
ord685
ord578
ord100
ord579
ord616
ord617
ord619
ord542
ord650
ord544
ord545
ord546
ord547
ord580

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ