136c5882cc8900fcce38e46e71795241_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

136c5882cc8900fcce38e46e71795241_JaffaCakes118
Size

24KB
MD5

136c5882cc8900fcce38e46e71795241
SHA1

a0ed49343be6c09b32559e8807878840be5eb4c6
SHA256

91d7f32b86fe001cbfbe5733e4f9faba9c0e1b6007ab1cf3a0d55813eae592e3
SHA512

75f93b275f06f747729ce4f795c3c2758680bca0ee85b0f3afce3f7ba9e90adf240c40db7e9866584fa4a26f5e653f951c76288d7c0ed11c33783f4d1b8a4efa
SSDEEP

384:15H7qrzMWf9pMzFUBMDSUexK6hz1Fs17QXxw:jQbMzmZhzJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
136c5882cc8900fcce38e46e71795241_JaffaCakes118

Files

136c5882cc8900fcce38e46e71795241_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2669048406d5f746d0978f1afce6af62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord513
ord516
ord665
ord306
ord307
ord631
ord709
ord524
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord318
ord717
ProcCallEngine
ord644
ord100
ord613
ord617
ord580

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ