JaffaCakes118_2139586cf404415b0a98bc49d2049b9e | Triage

Sharing

General

Target

JaffaCakes118_2139586cf404415b0a98bc49d2049b9e
Size

316KB
MD5

2139586cf404415b0a98bc49d2049b9e
SHA1

87b99523896406a6c9b26c1873bfb151dfbf2001
SHA256

43e948f886545966b1c6efb3726c92485b1d371f6e2b57b2aafbb423871a55bb
SHA512

155cd1f2cf4bbedfaed9f7b2195deb19814ee0bf3cd69e7b65f92244b977c7ef140f16e9ac4cc628731aa0423644b979c6dca8dd9f4293c73156d9fc8190126c
SSDEEP

6144:sU4hA0lHCd0cZXe+VwFsr0hNWTrta820YvKo9sRhn074NMvW:g1lHy0c/VWKv48Vho9sRhn0c+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2139586cf404415b0a98bc49d2049b9e

Files

JaffaCakes118_2139586cf404415b0a98bc49d2049b9e
.exe windows:4 windows x86 arch:x86

8d5202309d81dc92d9eea9738c23edec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60.dll..

MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord100
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lkl�sa
Size: 4KB - Virtual size: 4KB