28efb0cb57352bd49d5c5836551715ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28efb0cb57352bd49d5c5836551715ae_JaffaCakes118
Size

229KB
MD5

28efb0cb57352bd49d5c5836551715ae
SHA1

a0380672d1f27d20b24aa435e557339ca412ea34
SHA256

bfeb5fb695bba3ebf9813dc49fde387a28368f897eff6602546c567e705d8988
SHA512

7b436433514fdbc5ca82a56fcb004a3da261bbb4c7123e07bc4437cb5360ff8f630efb6747c03a90013271d2694ae600d5c46f32171f6de143deb2a42bf1e1c6
SSDEEP

3072:bNk4KhJq4wJso7V/2nmhPr5TxGCScV+qVXV57xTUadAIAOBQwVwJzMbxso+m+dYe:bEJq2wH2cw4Cad7Qqg0Ko+mrpfc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28efb0cb57352bd49d5c5836551715ae_JaffaCakes118

Files

28efb0cb57352bd49d5c5836551715ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08dcdfee2a581482c12f20b03cda8532

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord586
ord588
ord589
ord698
MethCallEngine
ord516
ord517
ord519
ord183
ord629
ord552
ord660
ord667
ord591
ord669
ord595
ord598
ord706
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord672
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord530
ord717
ord186
ord535
VarPtr
ord539
ord570
ord648
ord575
ord100
ord610
ord613
ord617
ord618
ord619
ord542
ord545
ord548
ord581

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ