4027caff87f91734b950f063d925e06f_JaffaCakes118 | Triage

Sharing

General

Target

4027caff87f91734b950f063d925e06f_JaffaCakes118
Size

152KB
MD5

4027caff87f91734b950f063d925e06f
SHA1

8242f613f245a47c9fde8e80c7ef7e6e3f3d723e
SHA256

e1acf1e2d90cc2abdecff1f02ca78a0891c87a0318556458c4da4eaa74d19109
SHA512

b13f296d756bb6351c39532f2774d37524f73e8ba2b4ec84000d29b8c39e1b777affc4743c4e250c758840266ddb4decdaa975b15860959a290dfa37b3a105ba
SSDEEP

3072:n0/1VE1vtR13FmnmpF+CkvMnQIKAWNBlU/XBq6ci:0/161FR1OmpF+CkvMYcFci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4027caff87f91734b950f063d925e06f_JaffaCakes118

Files

4027caff87f91734b950f063d925e06f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a817e26daa8f0b5c8d734142a40a300

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord517
ord518
ord519
ord669
ord301
ord598
ord520
ord307
ord522
ord709
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord675
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord572
ord681
ord575
ord685
ord578
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ