28ea40f2fb86fba36b31db7b4eb47b07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ea40f2fb86fba36b31db7b4eb47b07_JaffaCakes118
Size

292KB
MD5

28ea40f2fb86fba36b31db7b4eb47b07
SHA1

9831e960846c0420ad1430ecc5063bee2e82e3d5
SHA256

6861d5f8f8a5520d8fddf7dba8a057577bacc4b618d361b2f651ce0ac31b5ab3
SHA512

96f9ecd9e728f39d4510fa271704cc42e0f1f72e632ed60405da2e39a5a62bf6ee9a75b82c0aa85f13db145f92ba8b6ebd044609de88827bbb68f6f4146b9068
SSDEEP

3072:a9CjvoVAyyRpH2tPItKMfzQSRzPAAL521pkw8D3sqkOc9GTn9+wbe4y5sOIKs6Sv:SJyJfkkAh2s2Tn92yKs6nC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ea40f2fb86fba36b31db7b4eb47b07_JaffaCakes118

Files

28ea40f2fb86fba36b31db7b4eb47b07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58d2f7e134473172d75a4b05a8aa9d45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100

Sections

.text
Size: 283KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ