02dc240acf905849c37dbded38a93c59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02dc240acf905849c37dbded38a93c59_JaffaCakes118
Size

33KB
MD5

02dc240acf905849c37dbded38a93c59
SHA1

7a0fc7c3299c2a758cc2a260a5eccbb896aa3856
SHA256

0db0084efe6c2141e8645332a8d595d5a892fc0c7b2c23caeade5d75e91bfd71
SHA512

a5f70505593e27015422db9f94f44911a59d81974a2a32a6855e9fffbe242f6e131c7936c34e71d036f52a1e696778088fc8e5b1f6bd0ac83e23c7396632b0ed
SSDEEP

384:Gml+EIVfltpfAvJrKb7Go/gkZlWGlVgOSkKg5Jn:vIrfcrKPGo/g8lWGUfkKg5Jn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02dc240acf905849c37dbded38a93c59_JaffaCakes118

Files

02dc240acf905849c37dbded38a93c59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a897d9b5a89d9fee1aed9ac5e504fb33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord593
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ