421c77647450677498656777bf984355_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

421c77647450677498656777bf984355_JaffaCakes118
Size

40KB
MD5

421c77647450677498656777bf984355
SHA1

b4ca8efaa813249e1884cc850dd3581a8e9de6e0
SHA256

79fb8a7c892fcdfe4022ef00cc9c94e96abddb59110918b192d08b7b981b9eea
SHA512

7e0c6480e275b443757483f021d8361948ef9c81d32640d3a26506dab8658dc220f50e642a40575f12d19bf8799af274752383fba641d62f4dbf840b1c9ef9d1
SSDEEP

384:EnBFmc00xfeg+icRpepRkDAUrUWdUiBkjbl+G3JFmc00:8Fmc3l8pe8aEkjbsGZFmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
421c77647450677498656777bf984355_JaffaCakes118

Files

421c77647450677498656777bf984355_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c05b162997fd0b6cd803068d0513fcef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord531
ProcCallEngine
ord644
ord537
ord576
ord100
ord616
ord617
ord619
ord546
ord580

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ