103ea0465f1c504398c811f5db005af6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

103ea0465f1c504398c811f5db005af6_JaffaCakes118
Size

28KB
MD5

103ea0465f1c504398c811f5db005af6
SHA1

5966cbb9a93a26b5127c85c5b8e061ec75e65019
SHA256

48d1806b56ab5362610f0aa1699e24a1b6ae9714f2c84367d5cda3c933a9cbbd
SHA512

794955bfc48aafc1fa76159fe0801dce67c72957c4f30c2fb446bea61b3453e01873435ee76f72256068a0df2befebddea268d77cc4252e23b35a070cd8da335
SSDEEP

192:00eagYpbYIXLvT60ek/M1cc94uOey+qncT2LuE+5uBd1/CHQQRE621cc94u:0Ha5bvLvmaiGgy+qy2LuEN0+60G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
103ea0465f1c504398c811f5db005af6_JaffaCakes118

Files

103ea0465f1c504398c811f5db005af6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54a041f8191981a732993f9ab882d980

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ