JaffaCakes118_b2f625f9432181a9ec45632f24d441a5 | Triage

Sharing

General

Target

JaffaCakes118_b2f625f9432181a9ec45632f24d441a5
Size

100KB
MD5

b2f625f9432181a9ec45632f24d441a5
SHA1

e751b9443b0298e728948d18beb51a499325a334
SHA256

f9fc8b20517f17be7fdd7642ce69e0f80ce73b94ca59863d51478a48be9e8312
SHA512

e028a07827a47d4af6502f6f5159323d2eec40d89f5d66a6f47336e8299a7df5e16196e5a400d11e3a6fda85a9697d56192db815bf703692fb3f3347d018cda2
SSDEEP

768:YwG7v+pycu5vq0PZQIZdgoLUCHUZGkYgibiBXt6FJ9bb8x1A3znHWLxoCzhQz5Zb:Yz74yXi8pVWYFJ9bbICjWLxT6uLNz3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b2f625f9432181a9ec45632f24d441a5

Files

JaffaCakes118_b2f625f9432181a9ec45632f24d441a5
.exe windows:4 windows x86 arch:x86

74a1c055156e71b5a090dc690eb17d50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenThreadToken

kernel32

ContinueDebugEvent

winspool.drv

EndPagePrinter

imm32

ImmDestroyContext

winmm

midiStreamOpen

msvbvm60

ord690
ord187
ord587
ord588
ord697
ord698
MethCallEngine
ord516
ord517
ord660
ord662
ord591
ord595
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ord318
ProcCallEngine
ord537
ord644
ord648
ord685
ord100
ord689
ord616
ord546
ord581

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ