24b50e8d61ad21582bdeb23883afdfee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24b50e8d61ad21582bdeb23883afdfee_JaffaCakes118
Size

68KB
MD5

24b50e8d61ad21582bdeb23883afdfee
SHA1

36d3aa78ce8a7ba89c2d7fc31a928ada1d97a63f
SHA256

5bcd1b44908f2804deec018030c4ba58898a1d248f88d2890f63fceee9528d98
SHA512

fd4608e6e6f308ea2cde9adc173aba835f3d409230ed83467a488cd82b29cfcfabf37db2f2a841ac581636a1f100ba55a5c7c23dfb268bdcaa562780df7c2cea
SSDEEP

768:uiua0fJiHgvtwomyEdw/wkHjBl7R0pXjxXYi/OI79FzPNF0xKiGNeuosUYWV0Fus:1bcx/lMXjxXYimkFzcp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24b50e8d61ad21582bdeb23883afdfee_JaffaCakes118

Files

24b50e8d61ad21582bdeb23883afdfee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23eee81a215d6eadb345ff3e187a0cbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord587
MethCallEngine
ord516
ord666
ord593
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord717
ProcCallEngine
ord644
ord537
ord573
ord575
ord100
ord619

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ