146fd7923252bdb944cee6d8cc46435b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146fd7923252bdb944cee6d8cc46435b_JaffaCakes118
Size

264KB
MD5

146fd7923252bdb944cee6d8cc46435b
SHA1

282e5341a213ea9e892aaed2a8d77912bce84ff4
SHA256

808d6040b6579d7cca4ed6dec3a5ce21f2aaac9fba7ff1af9ac4773ac84225f8
SHA512

16f2e62922917b9a4813f4a76a818de11f4f27c06d22def42a17d195ac277195f42a52e839338fd6ace9de21783ab39fdd7cae92f9c134ac0c839eb776c3a299
SSDEEP

1536:TfHNyLPdkdz3yoIbi5Zo758gtrUVDqdDKPC:jekdz3yG5y582dDv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146fd7923252bdb944cee6d8cc46435b_JaffaCakes118

Files

146fd7923252bdb944cee6d8cc46435b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f8db64747dff4c57e0ad4e1ad2142d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ