1bd947d706ecc288e034b4c64b5a282e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bd947d706ecc288e034b4c64b5a282e_JaffaCakes118
Size

36KB
MD5

1bd947d706ecc288e034b4c64b5a282e
SHA1

5e5a005a6a9dbb3a8e790ea7af3a253d63e0843f
SHA256

755bbf29ce2d4962e974047f306dc511a12eaddaaef8ed2287cf681a6e8f5868
SHA512

a2151e5653781b1f1408f9cc5607e506fccb31e203983ff548bdc8171239def4f39d037fdf70c5d423c4e88429eec914b0906279be12cb72f1ba391a9742a8bf
SSDEEP

384:s8a6M6V5KUANG/woxYlezrJYHi5Vn9Of1nft23uX/XElidBQBq:na4ANqYleXJHVnURfQ+/EliXQ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd947d706ecc288e034b4c64b5a282e_JaffaCakes118

Files

1bd947d706ecc288e034b4c64b5a282e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e9e2d22c63507932487317776285c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord631
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord681
ord685
ord100
ord616
ord581

Sections

.
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ