07221fdd39c3c561611cdc5c29827dc8_JaffaCakes118 | Triage

Sharing

General

Target

07221fdd39c3c561611cdc5c29827dc8_JaffaCakes118
Size

132KB
MD5

07221fdd39c3c561611cdc5c29827dc8
SHA1

d52de7b9e2f8d9f2f2d8b1cdb93888de0f536649
SHA256

d5611aa02f466aeeca5f4106b7cc584b26231f530d75671c31060f448e249a95
SHA512

4b6b3c5c1af092d07bff253d27e789778bb1fb5b3baed599cd19d773e3840b0dd8e76259d9b2246ad1d27ef12c98db451d3ca92dba449f0a64729c45c31a5514
SSDEEP

1536:6P7p/THO6rM2UElBkIvIwDyQ5Iwz/H6F9kmYTRdfuLTwo7JaSi:mp/THO63UElBknweQz/Hhlbf6wQU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07221fdd39c3c561611cdc5c29827dc8_JaffaCakes118

Files

07221fdd39c3c561611cdc5c29827dc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cdcd6a6533445ab6f0c7097ee1924db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord518
ord519
ord669
ord595
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord648
ord681
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ