267c802cb119ab62a64089a16d1700ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

267c802cb119ab62a64089a16d1700ef_JaffaCakes118
Size

337KB
MD5

267c802cb119ab62a64089a16d1700ef
SHA1

15d9db478cf879c3e77658653306c8acca5c0fab
SHA256

45d359b66eded65c4d0cc92e54d5a790b11374fda7a096b02d10a9c48a6c3d1e
SHA512

d4b24d56e08d00d2ce5fba15c9e8bfdfe672b0019ab7b2276897e61a5c2d3dadf8df9c54db1e39724b8b856ab467425e12addd91ba10788ae78eefef5e124f9e
SSDEEP

6144:sOe4X0RN2f7gcQ93v5e2+8EM/2eLHsREB4zCtMuIdLBPtdzWIsbEwx:ve4GN2f7e3Y62WMXzaRIhfpWFbEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
267c802cb119ab62a64089a16d1700ef_JaffaCakes118

Files

267c802cb119ab62a64089a16d1700ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94423e3beb50b031bdf2ecc5ae58f878

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord581

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ