25ed3501a9d50e23a9bb703f0fe5316e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25ed3501a9d50e23a9bb703f0fe5316e_JaffaCakes118
Size

55KB
MD5

25ed3501a9d50e23a9bb703f0fe5316e
SHA1

9a02f88ecb5ce70b37b545b4677eaba852e32bd7
SHA256

40ee6dc595675a6d7dc470b7b5c73d16fa1ced59646cf4ad714009c8070b3e02
SHA512

4c8445bc0091586dc63b07acced51cd308147f624b37b1ba926ce1e9b538b596515c2509b8ca8b071c5d4f446e699549739b46ef6ec352787494295fdc6abe2b
SSDEEP

768:S4ph8YBEwKYKmpmqqB69fKInA4HG7P/iyydiJyJpKipjCNlZHgtgquhY:JpuYSYFmvBsjPG7PaSUjK1UihY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25ed3501a9d50e23a9bb703f0fe5316e_JaffaCakes118

Files

25ed3501a9d50e23a9bb703f0fe5316e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ