29250cb3e58c75ae661d811dcd799347_JaffaCakes118 | Triage

Sharing

General

Target

29250cb3e58c75ae661d811dcd799347_JaffaCakes118
Size

120KB
MD5

29250cb3e58c75ae661d811dcd799347
SHA1

62adf0d827ab4bc261a571a3df0854c97b3826ad
SHA256

d8ba510e7dc3fc6231cafd7c798e48d95554e1ed3ecc0347037f2124d77d340b
SHA512

7856a7c6c94cc7df053103f7a09bbebd9ceeba574527475d9027f1148cea0ef625f05606dff4f4a01680d64d0f7b838893969ea328c26169fb39b04317a538ba
SSDEEP

768:aqqxZSLVr/SiD2erCIcBylFGqE4/M78+9al4maorD83opAY/Hp8b9Dj2z7VP7LdR:BEcp/Qe+IlKqEAguBrDjqiwX/cYADD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29250cb3e58c75ae661d811dcd799347_JaffaCakes118

Files

29250cb3e58c75ae661d811dcd799347_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3573769145cc290528a0d9a64c7c5542

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord187
MethCallEngine
ord516
ord517
ord593
ord594
ord598
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord648
ord573
ord576
ord100
ord616
ord617
ord619

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ