314afacd0f0a4ace8d8ae28bea325d48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

314afacd0f0a4ace8d8ae28bea325d48_JaffaCakes118
Size

300KB
MD5

314afacd0f0a4ace8d8ae28bea325d48
SHA1

edc8de23a5e9bbb3c46f884e3de58cacfea073c5
SHA256

5184ff7bac539e46d556b9b297a0fc6cd5e6c22665b546a34d554b7b8d86b346
SHA512

3899fb902c84d31100c2c2692a149d8f337cf646da3975953cd188c11f17b8eef2b2460ad67511f4d4b7a4d133a5ab9a14443563432e080d1023b08e616377a3
SSDEEP

6144:Hhe5atQhGKA5XCyUzwYAv3cztZ1qXcWkzoyzjMKK:B1tQhckyUz3g3c31q3kznPMF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314afacd0f0a4ace8d8ae28bea325d48_JaffaCakes118

Files

314afacd0f0a4ace8d8ae28bea325d48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

991733ff816d35b46e8798de0e8856a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord578
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ