292b934d06f54ff6040b5b8d1e601309_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

292b934d06f54ff6040b5b8d1e601309_JaffaCakes118
Size

172KB
MD5

292b934d06f54ff6040b5b8d1e601309
SHA1

26fec897e04d079d4e5dd5db14542c3dcba41f22
SHA256

d2687adf119ddeb99bf96841b54ed02ed8dda9f7925d27132466c4d5333b6911
SHA512

1e14f120fcdcdb1371735e0026c44a04e47ac55913e6c7b2815d8ec0227d0c2dd35cfbe5a3c7ca4fd80bf5c7a830d21f0b21564fe01a64b21aba345daad542d0
SSDEEP

3072:6TUG8NqgmNl1SAmny74PBPYwisXC4fJcJsHQmg5/SCF6c90OKaRlwN1D9V9dzfpB:6kPRcJ9mg5F6iWl9htdO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292b934d06f54ff6040b5b8d1e601309_JaffaCakes118

Files

292b934d06f54ff6040b5b8d1e601309_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adf8020726ed3706d39635bc132cd320

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord617
ord581

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ