29663b09074e24179dadeade76f691cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29663b09074e24179dadeade76f691cc_JaffaCakes118
Size

599KB
MD5

29663b09074e24179dadeade76f691cc
SHA1

74cae56262e3c1a13b7caea7da0c5c3c18f2d96b
SHA256

b53efdb88cbae8d1b1edc47e50be94121f02c8c183d62eef5897a9e6d9466eea
SHA512

01c90171624af80e5b97f21cb4a71cef0e4263fb5097cc527d9b6797a57dfbbdfbf7c755b4158cd3f38ddc591d4d8d61083831aa5d7a9965f54b1aea3995b9cd
SSDEEP

6144:yXDtmoNYFW7nZPsnBpi3W4+GFz/VZY/UyqSt6KsuclDzcRrp2:y1PWO7z/VWj6Ccl3YM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29663b09074e24179dadeade76f691cc_JaffaCakes118

Files

29663b09074e24179dadeade76f691cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1bb00d45a108149f23c89e0c1e0f128

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord517
ord519
ord595
ord598
ord599
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord645
ord570
ord685
ord100
ord617

Sections

.text
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ