29e0a0dc43d49c03ff08891d61eef06a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29e0a0dc43d49c03ff08891d61eef06a_JaffaCakes118
Size

492KB
MD5

29e0a0dc43d49c03ff08891d61eef06a
SHA1

2db493998707548924bfaf4b66cd37fe9a2f2ee6
SHA256

da8590148e0660730477aa4903c1383548bedda51b9437e5b369703e13d2cba5
SHA512

48d6d65bb5524a4a2283067e9e8114bcacd98049403853055b60f8c8f665434d0137be240ce890b578ffbba95302f7d43ab470c5fa36a339ae9168de99bf8ad2
SSDEEP

12288:tlfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCGj:T8ptT4qVtcek2aUC/hCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e0a0dc43d49c03ff08891d61eef06a_JaffaCakes118

Files

29e0a0dc43d49c03ff08891d61eef06a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ