310cbc56e82e0622a058ce2e26941dc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

310cbc56e82e0622a058ce2e26941dc0_JaffaCakes118
Size

20KB
MD5

310cbc56e82e0622a058ce2e26941dc0
SHA1

addfc74b5df9ffa214232c55f13ffd0585b4b948
SHA256

b18885d9a9186e732b40f23b834f8d0cc9c14481c513a2b816ef9567562a4fe4
SHA512

b6b57394d765c05c4fee1e746258e5602d4346931e7a3fac68a36d05c8d393c08b999d8abea2ebac80dbd4f9dae7b4a1d39047578675af3c01554b2b947f6256
SSDEEP

192:Cv+E4oa5Ze/kPUG8T/ZQ2CUaUnj1YknYq:CkY/ksG8LCUaUnjakYq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
310cbc56e82e0622a058ce2e26941dc0_JaffaCakes118

Files

310cbc56e82e0622a058ce2e26941dc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e11a88628c4ff0f91f99381a452be4db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord609
ord717
ProcCallEngine
ord644
ord100
ord689
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ