133a9fa6a4dc776980942c273acf1bed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

133a9fa6a4dc776980942c273acf1bed_JaffaCakes118
Size

179KB
MD5

133a9fa6a4dc776980942c273acf1bed
SHA1

70d0fd6837da5239eb05c4e7d01a85ee0e0e1696
SHA256

deb6c0fbb403fdba93329b9ddc2d449c785078821171516752a6694dd9bb9ceb
SHA512

ed49a5c02d4cf6d3b62ae8d27ea9c17f181295d41814ec84b80879e61afb4105444598736c2d39fe94042e38ba9d426afc79b96a7a712386ffe7e0ce0f70990e
SSDEEP

3072:XK4aDP4aPraue/+Yy+nTMQikq4kpMQr4aDP4aPraue/+Yy+n:a7DPRPzYy+QQnQr7DPRPzYy+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133a9fa6a4dc776980942c273acf1bed_JaffaCakes118

Files

133a9fa6a4dc776980942c273acf1bed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49e8fb4b9d2eac24e18e836a6b8ee91d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ