f9c31eba6895dfb892a423e3363ed836_JaffaCakes118 | Triage

Sharing

General

Target

f9c31eba6895dfb892a423e3363ed836_JaffaCakes118
Size

32KB
MD5

f9c31eba6895dfb892a423e3363ed836
SHA1

0e3d0b53d064bdc9febb63412d2b9f4332e13cee
SHA256

ad9919fb8a1e91748263a7cac9d1826c2e9f2a3c0d955505fb8ed9925c5c3770
SHA512

4839e6addd2b9f24f5c813bedd27aab9e16e54c6b6131b53c8d148cc85e5c1e9c3d1ca59e2cae6f7b4eb7857cff56d8122bbdfc5db9190e226a8a1329eef6e0f
SSDEEP

384:5mwIyTIrnjhqUQIgPiqkFAtAB1rlOjLACvlr+Us5KqjRAsOh7QSTDuddavWgW:tyjh3ZFYjLXSOhl7QSTDuKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c31eba6895dfb892a423e3363ed836_JaffaCakes118

Files

f9c31eba6895dfb892a423e3363ed836_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42b8dabc2ef33228535a04b75b631533

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord572
ord573
ord681
ord100
ord617
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ