13243053f681154568dab330473e3946_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13243053f681154568dab330473e3946_JaffaCakes118
Size

140KB
MD5

13243053f681154568dab330473e3946
SHA1

3c67a677b3553b5252d47b6fff2debab512b0327
SHA256

996f65c8e0574fd1ac3751d8cfdc9a4597cf58d0824b742fc8a1ba6c604cbe37
SHA512

cf031ac331a02fe0ef4a7aa7d7aa64c467433eb497a91ca803aac10153eedae5410da3be1759510984db65f897b8e61acafce66250b616458cf0b0fcdc06aabd
SSDEEP

3072:ELBkZv7777777777777777t7777777777777777777dntPnYy11KM6gIP:Eq3PnYuig8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13243053f681154568dab330473e3946_JaffaCakes118

Files

13243053f681154568dab330473e3946_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a748bce074cc51bfedae0af85b559ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord594
ord595
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord681
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord542
ord543

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ