160797fb7c0c1590c8f1bfe131a20958_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

160797fb7c0c1590c8f1bfe131a20958_JaffaCakes118
Size

176KB
MD5

160797fb7c0c1590c8f1bfe131a20958
SHA1

cc72e1bf4bb900d8e8c42d32efa57fa7d31ada5f
SHA256

2f2d1e24c2809a10ecbb8d2fbcfc6c38a53e496c36304de536348d68edd0c4e9
SHA512

1b2ad662dbd299bc8f59830b3c908cb2945c3001153e7a29f43805199081bbc10458acabc46293af6e89ba0b60ac042f95081111c54a3606546ef358242345ea
SSDEEP

3072:eEUP0Fx0k4MWJjFalEadPFO0c6p866zn/ZF10MRhDJRiUvDl2m:61BhviUbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160797fb7c0c1590c8f1bfe131a20958_JaffaCakes118

Files

160797fb7c0c1590c8f1bfe131a20958_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b99b16d0093f357c814f82da170a2265

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ