1525efeefc164ea7eae2ad9e78ee4556_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1525efeefc164ea7eae2ad9e78ee4556_JaffaCakes118
Size

24KB
MD5

1525efeefc164ea7eae2ad9e78ee4556
SHA1

914084c31041c3e3ab1ea62ec278f47b08ba47dd
SHA256

03bcfbed7befe8be5f41e100fa701de90e97aa6db74d84c6287419b765acc810
SHA512

5784e2995e324114fd6b2d3ef28a1d37f4f201e24f436340ee076ba3b9670a074a4765d6a9824fcd573767d703f95608ee123c614253de49b387eae191a44837
SSDEEP

96:NIN5ONUGPDBzggKHc+Dvv5ksmuE+uRF3N3xFX27QEYa51ChExJn/zA7+cbtDtOZy:3UGrygYjxh0F37p27VTxpLY+IJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1525efeefc164ea7eae2ad9e78ee4556_JaffaCakes118

Files

1525efeefc164ea7eae2ad9e78ee4556_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1235ef23df4229d7ab5d6376dba9647e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord531
ProcCallEngine
ord537
ord645
ord572
ord100

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ