dca589c48fbbe18423ec7bde16f70d59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dca589c48fbbe18423ec7bde16f70d59_JaffaCakes118
Size

2.9MB
MD5

dca589c48fbbe18423ec7bde16f70d59
SHA1

f7b0a2644ed260260afe652883ebcf82a4ad9db1
SHA256

38bf83cb313a026525ccc1177dd7f6610093d060980969387e3f5ddd1b2dbaf9
SHA512

948ee186af6a669e9d694eb0dd7b56199ba0991899f79604f2e955b485a309954fb3a21e6ecc4346638d0130d102baa9511aa2ba7f2db37c3a09180cbfe9dd3c
SSDEEP

12288:JwgjIRbvt4SoGj86fha+rz+rYM2uMKoqUnvnS3jchYaNPRWP:XjurSSozihu2uMKoqUnvnS3QOOJW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dca589c48fbbe18423ec7bde16f70d59_JaffaCakes118

Files

dca589c48fbbe18423ec7bde16f70d59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca2db87b9aeb285fe295367ca326e0c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord519
ord553
ord660
ord661
ord663
ord557
ord669
ord592
ord593
ord594
ord595
ord598
ord599
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord535
ord537
ord645
ord648
ord573
ord681
ord685
ord100
ord610
ord612
ord613
ord616
ord617
ord619
ord542
ord650
ord546
ord580
ord581

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ