f0334d0822e8e1bebad2b69ae4f02a02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0334d0822e8e1bebad2b69ae4f02a02_JaffaCakes118
Size

32KB
MD5

f0334d0822e8e1bebad2b69ae4f02a02
SHA1

ea2da5bd1dd2c175fa806fef945bb3270d02c691
SHA256

2a09e62e3c7b6bea3212c41d75fc3a98072933266c1074ba8ba5c78f154cdb47
SHA512

323f1802a8137296a4fef8554336933a0d364d3aa34b0d426f3a5ba53f569a3f9aeb5ae9a52626b500d6418a3180677a74970e6a7c2ac5ee0e2238c76679495e
SSDEEP

768:WrA9tV6HKv/u+aXaeIM9ZNECZO60OKRAo:W2tIHKv/uSM9ZNEAO60OK3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0334d0822e8e1bebad2b69ae4f02a02_JaffaCakes118

Files

f0334d0822e8e1bebad2b69ae4f02a02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

432fec4de09664aeb01ddc52daf67dd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord593
ord594
ord595
ord631
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord571
ord100

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ