15a78e7a2aba2b63367819c1f89bfe54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a78e7a2aba2b63367819c1f89bfe54_JaffaCakes118
Size

180KB
MD5

15a78e7a2aba2b63367819c1f89bfe54
SHA1

cf7bf0a1281744fecb621c1e17320f47695e8ac2
SHA256

0398dfb14c6381a74a87125444f828e9c2b0041aad85a16848c7ed73cf5b1f77
SHA512

29c901696e02ebdc4b9b2ba128558c80a9ecbb35ab62d85575e93f1566a99d0019b75879eafd69241b3c561ed113785fc95afe8c12769a5d5254173950a3ef94
SSDEEP

3072:qw8SIx1DOGzooXe3QgP8b7xVF1aH8nRJC359lIyzCmwm+DYkt7s86f9KNvJK877w:BIx1DToozgEXF+0sXlBxK7s86fA5JddK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a78e7a2aba2b63367819c1f89bfe54_JaffaCakes118

Files

15a78e7a2aba2b63367819c1f89bfe54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6450c9cda7e212788b282515f646d72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord593
ord594
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord537
ord644
ord100

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ