d32149d461c0b7f8b71c4d3b8f492f3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d32149d461c0b7f8b71c4d3b8f492f3a_JaffaCakes118
Size

220KB
MD5

d32149d461c0b7f8b71c4d3b8f492f3a
SHA1

0f76c531d15b5e5e75aa93afbc9d600dc70afc05
SHA256

cacfe1ba16b4cfc7901ca6b97f598fe04d37fdfa4c03e49a46c28bff80fa628a
SHA512

632c8388646b3e818e8d9925324de43af0618db1e7f892b6704d4270e77217fdbd1b2f772e323cf2d56a154de8a93ff2e4c4d1cd8aec3215fd2ffb3112f60bb9
SSDEEP

3072:epLeeGthJxuzFmF7U/Utjk8JxuzFmF7+g3Pel:epLvkrxuC7UsFxuC7wl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d32149d461c0b7f8b71c4d3b8f492f3a_JaffaCakes118

Files

d32149d461c0b7f8b71c4d3b8f492f3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ