19a6a90f5f83441c02b75edd075105fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19a6a90f5f83441c02b75edd075105fe_JaffaCakes118
Size

388KB
MD5

19a6a90f5f83441c02b75edd075105fe
SHA1

8c950e4447e283d6aaac651f9f4366e0e3fded67
SHA256

097cb903dda2e09409901e2a5a1cc1127e6b2f2d54dc6bbf0116b119c0830af9
SHA512

6881a547b8c74e9dd337aaab4845a0a1ef691f102897897b8c608adcd3752d908a5b560d0f0e94b895a51e69665ff7aebe7ab0b28c759439424bd885520f5abc
SSDEEP

6144:KwzqqZfE1mey3zhwaAvu+9vIrUXa93eQKcl:KC5Eceq+pIwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19a6a90f5f83441c02b75edd075105fe_JaffaCakes118

Files

19a6a90f5f83441c02b75edd075105fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5262a8bd9de0ab0e1dc358f8c9f8e88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord595
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ProcCallEngine
ord644
ord100

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ