28c54634598e9bd1bc0cdb8030a52788_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28c54634598e9bd1bc0cdb8030a52788_JaffaCakes118
Size

336KB
MD5

28c54634598e9bd1bc0cdb8030a52788
SHA1

64cef937b3404389cb8017568ddd7c5fca2924dc
SHA256

4787a3729b908a4109e497022c7e21afec039ff5c429b2f1752041176811711b
SHA512

315b9b9c13acf630fbd56da50fe4408b97f150a780ec6bc82743449d364498d0df658f49d7a853665774f4a0c442fdd4a24c59c423b15b6c0534d4044c514113
SSDEEP

1536:JXtK0tnDjVInjGZdEf9qvUhOjYY1CnMZmbQtafER+TIlyX8JWLAdKP0BuD4ViHsh:JXtKonvVInqZzd3FD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28c54634598e9bd1bc0cdb8030a52788_JaffaCakes118

Files

28c54634598e9bd1bc0cdb8030a52788_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cc5add3afde9049479cd576972f01bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 308KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ