278867023af494320e6c059cc82be2fc_JaffaCakes118 | Triage

Sharing

General

Target

278867023af494320e6c059cc82be2fc_JaffaCakes118
Size

44KB
MD5

278867023af494320e6c059cc82be2fc
SHA1

61010a49e1148e7853b1ff7dd3c3c68515a34fc6
SHA256

42e00b6b5cfbccb3ec53edcf62223a273654184301030da603b8750bd74c25ef
SHA512

3c5eb6389371e4149862bbc9533604190426a83611fec66233a46da9e88b39cf64698857deefec1d81f258f85de8b4652058a546dd829d05eb9f70c6c0812c2d
SSDEEP

384:Je4DpESqrnqhVA3RqPEfj+x3HfBPqHE+kV3Er9ZTZj/P5Tyc+GCPXwpmIMZ7ZC6D:ZErqhVABqMfcqP/tlyxGCIpm31ZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
278867023af494320e6c059cc82be2fc_JaffaCakes118

Files

278867023af494320e6c059cc82be2fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c315ea85d0c9634ca337b8653beb9fcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord300
ord595
ord304
ord306
ord631
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord607
ord716
ProcCallEngine
ord537
ord681
ord685
ord100
ord616
ord650

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ