29b4b7a06149ef3ac3161c47c1becc8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29b4b7a06149ef3ac3161c47c1becc8e_JaffaCakes118
Size

165KB
MD5

29b4b7a06149ef3ac3161c47c1becc8e
SHA1

95e266a63246b509ce35d369639f9fee1102de5c
SHA256

1258c210e114f278fd50b49fcb9a231dabdca56aacd33e442e4a3b00b1598ff7
SHA512

60f18b37c8d9b16e323ec458edf9d330c6b69fb369383e15193c418c53a67aa689edf562be0ef8721338fce05bb6aa4876805592d0e998479e6dbedfab6f5d31
SSDEEP

3072:lTrnlgKIrHGTt1rP2F8c/wfs/2r/UlpyYreyzukwFrLlXLH+:5qtEtfsOoTdr03FrpXLH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b4b7a06149ef3ac3161c47c1becc8e_JaffaCakes118

Files

29b4b7a06149ef3ac3161c47c1becc8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e951f4e4dcececee21d03a42c4771be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord586
MethCallEngine
ord516
ord518
ord519
ord553
ord660
ord593
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord644
ord570
ord648
ord573
ord578
ord100
ord610
ord616
ord617
ord619
ord542
ord545
ord548
ord581

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB