197ccce3db3317d202fc0c1c27a8762b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

197ccce3db3317d202fc0c1c27a8762b_JaffaCakes118
Size

16KB
MD5

197ccce3db3317d202fc0c1c27a8762b
SHA1

e3298f64d493e2ea9e7a72a083cbaa955c73daf3
SHA256

241d24a404618d74a30a928fcce54accdcf8d881bc1c26a81600daf55026f30c
SHA512

d5031e352b1e41ef0bbfa6d26fd56aa8a1aaa0f454220a080daf8870f122b2a563f3fc6c79715853c0b82a29a2b1f8c45c2c7b416ea1b4384d8d891b84fe472d
SSDEEP

96:jugAvN+qUkdO0WBOP5g9ezCykRBrSXGCys7wTqfvOHxZzqJcGms7QR+Lp9vik0C8:gSUxels7wTqfvOHxZYcvs7QkLvik0u7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
197ccce3db3317d202fc0c1c27a8762b_JaffaCakes118

Files

197ccce3db3317d202fc0c1c27a8762b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

895174995c2580543cac5c86504789fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord596
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ