d276224cc18fd0b133f43f99c176fe19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d276224cc18fd0b133f43f99c176fe19_JaffaCakes118
Size

532KB
MD5

d276224cc18fd0b133f43f99c176fe19
SHA1

5b658616c7aabb75bfd94fd1729140ef57336b12
SHA256

6d0f08cec4ef6c4522cc187483219616d88d74c7b9bc95d47bff4ad7e9889ec6
SHA512

6b931ca1202a43bbc024d9b0349155c881652ae739396e547f863e6badba9337e22fee060eed77848a55f6f8833e17b2eabc5a2a9c8b6781ed770496c37c9984
SSDEEP

6144:DfxCHhpzh2vtm2yWk+bWcmehRQs1XXbWcmewkW2yyt0x6:DC10wNMxFXXoN9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d276224cc18fd0b133f43f99c176fe19_JaffaCakes118

Files

d276224cc18fd0b133f43f99c176fe19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

882ecd63b039d514318c3af1ca482549

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord647
ord572
ord573
ord681
ord100
ord612
ord617
ord619
ord546
ord581

Sections

.text
Size: 340KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ