230774b1dd7e63108deb21de4afe2dcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

230774b1dd7e63108deb21de4afe2dcb_JaffaCakes118
Size

40KB
MD5

230774b1dd7e63108deb21de4afe2dcb
SHA1

1c8dbbcf860a22d71f66ea11f60e51113d8b6c2f
SHA256

197f089eded0d2b6e852c368cd3bf053d6bbae135c9e3439ab2a79bb6487f6b8
SHA512

e1bf9d9c21446189a55fc11eadce91c4d8fc66755d364f2a3bfde0d4fda59756e7c68e2af10975f657723d396e38ab4c2b6b4592b13025b83ad9eeacd7c604be
SSDEEP

768:IS7fGl/YXI8wF+n+bxi0uuaI3DwwR2iF9uMj:I6cOn+bxi0ufI3DwwRP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230774b1dd7e63108deb21de4afe2dcb_JaffaCakes118

Files

230774b1dd7e63108deb21de4afe2dcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2411b307c844fced011ccb8ad0cf335

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord558
ord593
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ProcCallEngine
ord535
ord537
ord573
ord100
ord689
ord616
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ