29eafae9e6dc6a530ecdd663b88882e3_JaffaCakes118 | Triage

Sharing

General

Target

29eafae9e6dc6a530ecdd663b88882e3_JaffaCakes118
Size

28KB
MD5

29eafae9e6dc6a530ecdd663b88882e3
SHA1

c8f2e5244fdeac9d0d6be939671702d16b0448fd
SHA256

06a2b811bba79cec6834122b3e39d52ccc2b2e2010cd9d64e48c2fa981f2583a
SHA512

05182e76a59a65497f7c2805d50cec0bc0f143205d6b7af96869645bde5e836be0c89b2d5c8941f9e88ab4afc02c0e72d763dd2a6079e3b34218ffd694cbd5ea
SSDEEP

384:7gA19uaJCG+GNMnz3u8qk1v3ej60eAqcYrb:MI9NJ8na8q6v3JAaf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29eafae9e6dc6a530ecdd663b88882e3_JaffaCakes118

Files

29eafae9e6dc6a530ecdd663b88882e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f26c154ba7ad9d5c8925b7d41b1d987

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord303
ord304
ord598
ord309
ord709
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord607
ord608
ord537
ord570
ord685
ord100
ord616
ord617
ord619

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ