31ccf293fdd90ef27a412033d0a2f97a_JaffaCakes118 | Triage

Sharing

General

Target

31ccf293fdd90ef27a412033d0a2f97a_JaffaCakes118
Size

640KB
MD5

31ccf293fdd90ef27a412033d0a2f97a
SHA1

435ea6e14f0e161e12b8f30406a23361d91920b3
SHA256

90cc5b61a5ef07c0cf66ad14ca18511e4b0b730b38f7de3d2843311c568c7b8f
SHA512

0f4f8767b2e46c9ebeff6f31e14f4a38fd286a5053f9e37bff0d0ba0a223080449bdd7964c80c4cf394f8f03247e42691afbec4fa501717f026a7f5cdf0f94d0
SSDEEP

3072:Trh4qHoqG50FC6XWQaD/Ws1JNmfrXl9b0S5M1WFS01WFjrXl9b0S51JNmY/Wsdag:mqFGagD7qXsS58XsS5F7UVEe0Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31ccf293fdd90ef27a412033d0a2f97a_JaffaCakes118

Files

31ccf293fdd90ef27a412033d0a2f97a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7ee0f9cf94176dc4377815299af6a4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord535
ord100
ord581

Sections

.text
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ