1a8e7517730cb7ba7bc69f6206cf9277_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a8e7517730cb7ba7bc69f6206cf9277_JaffaCakes118
Size

176KB
MD5

1a8e7517730cb7ba7bc69f6206cf9277
SHA1

72209575be35f1ae5bb291c6f90d442b4e667038
SHA256

4902bcd379245ce45e8507b026379a3649af1c1012280d36f4e92260f3629723
SHA512

ce0da26b760bdf1bbc86e075a7493378591b9e36c8de145500474efc4e0f4f3e9bee06f2b1343c2948cb9a04459ed3c0d72eacd4cbbaf39316a96b4564298f10
SSDEEP

3072:V/NsJmKbgeVMMVl5y7akykZkSNMM0geUrOJ:VOdbjMMT5ofiOMM0Ka

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a8e7517730cb7ba7bc69f6206cf9277_JaffaCakes118

Files

1a8e7517730cb7ba7bc69f6206cf9277_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f62ed46918bfe5d9d25e9ce59d68fed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ