152edd5a800ea89891a15035f6a56862_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152edd5a800ea89891a15035f6a56862_JaffaCakes118
Size

552KB
MD5

152edd5a800ea89891a15035f6a56862
SHA1

ab5afaa6ef1980e47555a7c0eed7c24835bcf6eb
SHA256

f6519a3bb46132c10fa338515751b3dfdf2dc2b84253c0d74eb3533c2bbcf9fc
SHA512

3035b6e06a8d3afe116d56fba60d2b02f8e8697396a04bdb518b6e05eb42be0ad5cce3f606c01bb6ed2225bf80636a2bf58fb6383302282f3f67a1041e5e2116
SSDEEP

3072:ECKjObjP9lnpFirN1DSEzm0YPJWbibjeiq2Hgj/07DllFPltRshsAqX0Zm3vH4xp:sQZZ03mfH4x1f/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152edd5a800ea89891a15035f6a56862_JaffaCakes118

Files

152edd5a800ea89891a15035f6a56862_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2efc93fc4d572e407dff898b3f80d0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord616
ord581

Sections

.text
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ