12da7e49c849c338cf2de70a2e131efd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12da7e49c849c338cf2de70a2e131efd_JaffaCakes118
Size

116KB
MD5

12da7e49c849c338cf2de70a2e131efd
SHA1

2b158639bae4712ce5d0a8f8d73344908fa83295
SHA256

64c6b93ed21fed28cf203c9d2cae3f9116a6af0cb8e7100b92da4dd5b702d4c1
SHA512

b9a71dc062ae0f850da464675df5f215f5ae61eee7c3c030c634afaf533a7df636acc3eea1a9b506847645b0fc49fa23c725bbbc60ca6baabeb3b3b47ec34ad3
SSDEEP

1536:ryFbIMOWt+EFoDjxJTvCRERuQqCqOQgwE:ibIxWoDjxJTvCREN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12da7e49c849c338cf2de70a2e131efd_JaffaCakes118

Files

12da7e49c849c338cf2de70a2e131efd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d14b18a48e5b4279ee0182a0ae086d28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord593
ord594
ord631
ord709
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord648
ord100
ord431
ord616
ord617
ord619

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ