30c141ed951acf0bf3bc7c5ce23c978c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c141ed951acf0bf3bc7c5ce23c978c_JaffaCakes118
Size

208KB
MD5

30c141ed951acf0bf3bc7c5ce23c978c
SHA1

5bea44156b6fe0ff2d6c02eb37fa00bb41b1a0ff
SHA256

7f34f42a71349e7b12c9bfde5f7ff0471e688bbc7f40012b3e7130ff03c4f378
SHA512

40271204ce29cd192c71e3cfb65cd9523e9539b8442e39ed79459c4d1264b1f8faaed7a38325af28808e407c8bc9e14346baedb5e35d8269a2ba53831ab07ed5
SSDEEP

6144:TMRLy83rbDGrLHd26a1z+QTAOq3tqUCquVq9y+WoT4s6mTmpVFhZwGoZw:+hbCnsL1pTAOVUxuo9EtO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c141ed951acf0bf3bc7c5ce23c978c_JaffaCakes118

Files

30c141ed951acf0bf3bc7c5ce23c978c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b91177e058032023d6ef5116562c02d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord681
ord100
ord617

Sections

.text
Size: 174KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ