d51c8246036a18014e6e75b960d6bc19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d51c8246036a18014e6e75b960d6bc19_JaffaCakes118
Size

344KB
MD5

d51c8246036a18014e6e75b960d6bc19
SHA1

e147f36d00f0411be792596b27896d76d367c33a
SHA256

f4be7a8eab4becaf6b17ce7d62286bbe8c44cffcbeb69596aaa3fd8ea4640dd0
SHA512

08c486a08e93ca38b6dd9a4a00a3c17a0fd42a0686b998e792ba10d4a1ab768693fc7f78b0e5c7c2cb7ef6153f425b751172dad8806d33e1e3a06fd30ef48b9d
SSDEEP

6144:77vLVMn+M54kqs2HnRJRjXXGTCYneTIh/Z+b4OO+0PpTS+N:Pv5E4s2HRzho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d51c8246036a18014e6e75b960d6bc19_JaffaCakes118

Files

d51c8246036a18014e6e75b960d6bc19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be9b28f1b644af0eb3186d970ee99e05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord587
ord698
MethCallEngine
ord516
ord517
ord660
ord300
ord595
ord303
ord598
ord306
ord309
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord607
ord608
ord534
ProcCallEngine
ord535
ord644
ord537
ord645
ord647
ord648
ord571
ord573
ord685
ord100
ord579
ord689
ord613
ord616
ord618
ord619
ord650
ord546
ord581

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ