303710110ccf0bfe1011c091f3f97215_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

303710110ccf0bfe1011c091f3f97215_JaffaCakes118
Size

30KB
MD5

303710110ccf0bfe1011c091f3f97215
SHA1

84fe53921fc9063023e0632f816697e21e208a0d
SHA256

acbf58b4a919fc9e8f85ddcd54cefbfbe270f2f14c3030a023a8bcce1848c124
SHA512

5c6d0fa697436a8064e7a0a98b20424dc20a4df11f9564fb7f889e6501dc11440ed91de9737b5a97a7895003c4e99861117d394db0619c8bdb38aede73745a29
SSDEEP

384:kFLWV+e8rzG+7NHDpt0gfrawkxudOZUpk6/I8Wcdf8AiMZBEntpD:kFLO+ev+7hD3afXUW6bW8f7atd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
303710110ccf0bfe1011c091f3f97215_JaffaCakes118

Files

303710110ccf0bfe1011c091f3f97215_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869f420480d0d554f357c711bb26e379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ