1626e3f67344372526b0c1ec25af3d98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1626e3f67344372526b0c1ec25af3d98_JaffaCakes118
Size

52KB
MD5

1626e3f67344372526b0c1ec25af3d98
SHA1

1799efe31912f8ed4a25cfd89802467a4884f3e2
SHA256

f95c41f18d276200fe773651ad534597b832109a06fb686ebbf1746ba2e25fd6
SHA512

7fc4796e96620b844210835c9b5c83150f26d9fb08c195822187a54fbb32e7f88c4527e11b31f876841bf9b754d645cae2ed5e47a3ff7f91fc928b5d1e282519
SSDEEP

384:v3pwEMb2sGIfqMm4lDCMjwwekjcAaR6TGifkW15n6XpsLvBvRZw9R5Meh8yaSEaO:/zgGrsCMkwtaRgll6XqTBOR56xt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1626e3f67344372526b0c1ec25af3d98_JaffaCakes118

Files

1626e3f67344372526b0c1ec25af3d98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

392244f968f436bac632808fd73ac62a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord595
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord578
ord100
ord579
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ