f721f43c671e10d538f4c774039ff437_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f721f43c671e10d538f4c774039ff437_JaffaCakes118
Size

24KB
MD5

f721f43c671e10d538f4c774039ff437
SHA1

d90b10e8b5ac4b02a46b57c4649b0f1522424a60
SHA256

ef840bab4fbe8c076d85d5258fe158955bd7fe3d1752af819cd9d332da9842c5
SHA512

adf4f2a4d6b1f5a4562b1dc7b8c3752574caf13c077779aa363f8f616bf8302372a0ab2bc26acb82fdb987e2fa6bfb7a6adc7c43e757dd864bb9ea09b46d3dd0
SSDEEP

192:/9sehASb8+Tz09gy5yg21t6j3srmI+0DLFkelIKlAN5Tsqd:Wh+TY9RAt6j3c+mAsqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f721f43c671e10d538f4c774039ff437_JaffaCakes118

Files

f721f43c671e10d538f4c774039ff437_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e0b750b00d7422160a8b81b8382d370

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord593
ord594
ord598
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord606
ord607
ord608
ord532
ord319
ProcCallEngine
ord537
ord645
ord570
ord648
ord681
ord578
ord100
ord320
ord321
ord616
ord618
ord580

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ