143cbc44b05764a4ee0799f8ce13651c_JaffaCakes118 | Triage

Sharing

General

Target

143cbc44b05764a4ee0799f8ce13651c_JaffaCakes118
Size

160KB
MD5

143cbc44b05764a4ee0799f8ce13651c
SHA1

42a6731d6da5de3d18c0861246e653e6befa47f4
SHA256

d7a1c6d8507d1a675243475ddadb5bd4257807ea0674c32626cc44e8a4e191a8
SHA512

33e0a08969b36cd80aba4129254aba3f9843a8c599cd082aabdbd7dc44b43db61d467450e159baa5755b8dd002c875bf85919074b8fd232679fd123477c82d12
SSDEEP

3072:NXFgyDjBue6RsY5EkE/cQlUd645g+WljmwaJd:3PB3Y5o/cQaI4C+WljVaJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
143cbc44b05764a4ee0799f8ce13651c_JaffaCakes118

Files

143cbc44b05764a4ee0799f8ce13651c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7304ff81afe29a9063345f7c84d77f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord517
ord669
ord593
ord595
ord598
ord632
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord648
ord573
ord681
ord100
ord617
ord619

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ