150a75ffbc2b31a8d9e0a1d96a421444_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

150a75ffbc2b31a8d9e0a1d96a421444_JaffaCakes118
Size

30KB
MD5

150a75ffbc2b31a8d9e0a1d96a421444
SHA1

dac5aa07947b674eaf7ea81aaaef20610ea33896
SHA256

0e00277f8ed1d87692ddc18e108419eb25a22aa0a297e1f00cc6418ad042dc97
SHA512

e789efe6cb2e6f818cc5650ac0e3b8bb3bfb99942dd3b1d76bba8f21d2d8cdf7cdb00ef170c80902cf923b36bc9935477df179a0ba63813321e162610c2bd9cc
SSDEEP

384:k1LWeDc+e8rzG+7tHDpt0JhykUxsNCTdPtVP1BM/p473ES:k1Ldg+ev+7BDeQUCTd/1BM/p473ES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
150a75ffbc2b31a8d9e0a1d96a421444_JaffaCakes118

Files

150a75ffbc2b31a8d9e0a1d96a421444_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869f420480d0d554f357c711bb26e379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ