19536d334b1d08cd4213fee670fd7f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19536d334b1d08cd4213fee670fd7f41_JaffaCakes118
Size

24KB
MD5

19536d334b1d08cd4213fee670fd7f41
SHA1

eb19e91b047f561ea73265d4fb15e19040550b2f
SHA256

cb795a6f7e8be6d7d55ff38492e76efe54314f3f8c9669d6257a18b319fb0110
SHA512

eb7cefc77f3abba2bd4778c229713bca92d1015792872b29376625772959d5cbfabcff994ac164068176a4c958c1f9ff3e02b4f22973e81c4cf2810092ed06d8
SSDEEP

192:FmwuGFQAYs1Kh8qTao6qQfcxPi+4KdFQp3eWslLDu9waAyA94965VTJlP:FmwJFQ/s48quc1LP6IxyAJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19536d334b1d08cd4213fee670fd7f41_JaffaCakes118

Files

19536d334b1d08cd4213fee670fd7f41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c7d4b18c4fbcd14f5f50774b56a64e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord594
ord595
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord573
ord681
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ