28a8da5cc3e830de73d0d9702da8f80a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a8da5cc3e830de73d0d9702da8f80a_JaffaCakes118
Size

652KB
MD5

28a8da5cc3e830de73d0d9702da8f80a
SHA1

7539d8c1c20d44ee695255d7d870b6a9a460d0fc
SHA256

59682a8dd9b1699f3cbd51ea1012ea95e2a0556c8c601c193b1ece280f3c50c7
SHA512

b3a777ff3befcf18b260c82aa3fa6509319ceb85067d114a412c6f414880398a0ee6dcd87b33e872ee02a0442b5043131748492af0d6dadc339e9d1afda77d1e
SSDEEP

6144:tsD95QUhLtNZjwCLGGX3FAB9UhLtNZjwCLGGX0FABhyvByv8iLi0BEBWqEaH37EK:tyjtYibhyvByvZuQqV37JYhyvMQ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a8da5cc3e830de73d0d9702da8f80a_JaffaCakes118

Files

28a8da5cc3e830de73d0d9702da8f80a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fbc9302f1fc09fb1058d400f39fe87f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
ord696
MethCallEngine
ord628
ord592
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord681
ord100

Sections

.text
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ