30c8fe26006c7641ec64d09311f332f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c8fe26006c7641ec64d09311f332f0_JaffaCakes118
Size

4.1MB
MD5

30c8fe26006c7641ec64d09311f332f0
SHA1

228c73c988e84a05d8eaa88f0bf187f6d0e061e2
SHA256

6ed0fc87c879311c26dd1a535245d31313841697aaae11ca905acddf846ae4a9
SHA512

5aba89adb59486a0c694a2807a622aa72ef72fa1b49b55efcf2218e6ae938ae4f03d013848d319dae1bfffe67e5ad8043d18ff4122c79ade1c53757810289eb3
SSDEEP

98304:w8WqHldzZ+/9z2X2/uGDe1XDh6Uz0/3Y+IdL0I23s0XX/t:zJH/4Fqm9elAUOPIZ0Tj/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c8fe26006c7641ec64d09311f332f0_JaffaCakes118

Files

30c8fe26006c7641ec64d09311f332f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcf42e1a14110d3a3ae762809131a6ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
BASIC_CLASS_AddRef

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ