de239292e707a271733bdbef3020b9ad_JaffaCakes118 | Triage

Sharing

General

Target

de239292e707a271733bdbef3020b9ad_JaffaCakes118
Size

29KB
MD5

de239292e707a271733bdbef3020b9ad
SHA1

00761d3c29129c87baa73a6756ba0120b3f92b9c
SHA256

23596b62dac10bef51e50aae24f6b6814ea6a3c6ef236cd44fa49d044adc18ae
SHA512

8e743f48c3a278adcf9b7508722ddf6dcc6d1e9e49497b81bff143b93ba244d2937beff3848c7c466c8461b49cc482eb6dcd8ed8adb52f3837eb72c1f6e8f768
SSDEEP

768:7JN81Jen9UPZ8aCb+IRx1wrFAryJd4mBAH97oYHXqaGNe0/:ken489yIbeAryAmBAHKYHMe0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/out.exe

Files

de239292e707a271733bdbef3020b9ad_JaffaCakes118
.rar
out.exe
.exe windows:4 windows x86 arch:x86

cd80040d574f755364341443770f2bac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ