11f75059111aa3f83dd27d325f2ca8ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f75059111aa3f83dd27d325f2ca8ba_JaffaCakes118
Size

389KB
MD5

11f75059111aa3f83dd27d325f2ca8ba
SHA1

f731427f39cf4da9f0bd16a6b5d18e9690ecf645
SHA256

035070dc2160ed1d18ab9a2a3a142eeec4a2d120973b8c3fcdfd32b1d5021aec
SHA512

31a78dd7c96cb22704822b973ca0eed7e0f84e677e0ffab470b5f1ab4295129b5aa8456aebc242725a1c0e49f5819cc9c8d3e30c5233d0376fccb98492bc283a
SSDEEP

6144:zZdMzme3aCYgIEztARPIG6y+f6nQb6xycoCuc2HaWruT5V5sKvgpyg5txKOAD6jB:tdamoiglKRyT6n22oCCHa45plS96TB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f75059111aa3f83dd27d325f2ca8ba_JaffaCakes118

Files

11f75059111aa3f83dd27d325f2ca8ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8269746f9ebb9c906782a0e23b5dbc9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ