15f0a22c06c2be78c39e1917e2e798ca_JaffaCakes118 | Triage

Sharing

General

Target

15f0a22c06c2be78c39e1917e2e798ca_JaffaCakes118
Size

120KB
MD5

15f0a22c06c2be78c39e1917e2e798ca
SHA1

7c2c3fe1b56f19376aca59d0cc44fe4614ec4f65
SHA256

b0e40f83154bce1343f616094c5c67fb9991f06aa7a0fb1915f952e40c3d1bba
SHA512

a40175c1bd27a94a417be7487783dd6f36d454bbe353805aa217990410bb664d4f835cce57d3c0fdc65f98be290bab0cd8eed7541793a38be2bec69260b8a3b4
SSDEEP

1536:qurIK51KOzsoK+dtPVpiudZNeLXWB/LnT0MWkbT3y+:3JEL4Xk6Zv3WO3y+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f0a22c06c2be78c39e1917e2e798ca_JaffaCakes118

Files

15f0a22c06c2be78c39e1917e2e798ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c380eee3c2bb684d1e03e5912394ad6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord693
MethCallEngine
ord591
EVENT_SINK_AddRef
DllFunctionCall
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord570
ord100
ord613
ord543

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ