4123f574bb942af232bdc5522784ba14_JaffaCakes118 | Triage

Sharing

General

Target

4123f574bb942af232bdc5522784ba14_JaffaCakes118
Size

200KB
MD5

4123f574bb942af232bdc5522784ba14
SHA1

024fa99601fb3deb752b3c5351898690c4f0a12b
SHA256

fd09d4cf66dd7c674f25ffbb0d3e8ab3ad2c200734dd06e1b3e481f6f49e5229
SHA512

5a189cf3a96febefb775979d1a624f69c4f03521dc937f4975e17774529a03e05c8bc96515e617d1cf47fcf5e4209268f8bd96de092391c981f405d74bb2b7e5
SSDEEP

3072:vkLcx+Tstk/pOBU6ZbWdlLCRDM5ggQkeG3q:cLcgTstk/pr2RDM6nF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4123f574bb942af232bdc5522784ba14_JaffaCakes118

Files

4123f574bb942af232bdc5522784ba14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6826be2d7d23aaf854edb5b56bbdb74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ