116d1979a0911b18fb96202672dc73ff_JaffaCakes118 | Triage

Sharing

General

Target

116d1979a0911b18fb96202672dc73ff_JaffaCakes118
Size

27KB
MD5

116d1979a0911b18fb96202672dc73ff
SHA1

889fee735c05878f43da43e7079068f7c4f700fe
SHA256

bbec3f02ad0987d63f914cbf4d44c7779c51845a34a10c89a50f905c07c7810e
SHA512

c4a17dd80120b9084bea7d3bf3c1a513a5bed3d314140fd2358380738a22ba2e88968e47dd543ca9c0f9e2379aca5cef3db4227040d75614e4a0a14b0cccd067
SSDEEP

768:NGk7jHMh48GEWsXmi8XEDKJdKpck40Ya4kI9n8H5cGk:pbMh48GEWsXmiuqEy5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116d1979a0911b18fb96202672dc73ff_JaffaCakes118

Files

116d1979a0911b18fb96202672dc73ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9dc3aad9f2e95660e63fe25a71d71d76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
ord625
ord595
ord303
ord304
ord309
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord530
ord608
ord535
ord645
ord571
ord576
ord100
ord579
ord580
ord581

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ