22132ed29f176eff8d8bef0a14b7defe_JaffaCakes118 | Triage

Sharing

General

Target

22132ed29f176eff8d8bef0a14b7defe_JaffaCakes118
Size

83KB
MD5

22132ed29f176eff8d8bef0a14b7defe
SHA1

5931af5b392020101435d07e5162a19ffaecf1d6
SHA256

1453d9ed64ec8935d936f87b353c0c1b6789009aa802bc1925b3502b1c2c4749
SHA512

59e0d963e2cb72e250f6ab1ddd55343ea4ae26a8170d85bef51de09143fdc337d8d04ace30b4d8a36939c29650cfe54ba752823ea5b97d144bfb8b20016065b5
SSDEEP

768:7RI4OmYGbRvYxZnHch4onFCah9Y0PplTg0jaNvJ6F30F8LXl6r88xDaXhiBRtDUM:i4Om6chPCag4ppjS608LXl6YwRvirwYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22132ed29f176eff8d8bef0a14b7defe_JaffaCakes118

Files

22132ed29f176eff8d8bef0a14b7defe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8fab864dce8c610e3290f69ada21066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord100
ord616
ord619

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ