36a3d24aa28040d0613c94dce61460ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36a3d24aa28040d0613c94dce61460ad_JaffaCakes118
Size

96KB
MD5

36a3d24aa28040d0613c94dce61460ad
SHA1

74b3c91423228564c5caa9434d8a9636d9fa8f3f
SHA256

73f40cacccda3c63e3a6cf30f43ecdd527114085dbaa2f7d4cb8f2346dfe0637
SHA512

3799493dd1d96b45b1bb149082ca3386f558d991985322fc5d8b4a1f061e4627dab54090985a067e367ef6a8c5bd8139ff365ac7b9d9144f3707705168055806
SSDEEP

1536:llyfjyZyY6+4C5HaOgscGQAvRk0gcMFFUTIf:OfjOyY6+4C5HaO4GQAvRk0LMF3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a3d24aa28040d0613c94dce61460ad_JaffaCakes118

Files

36a3d24aa28040d0613c94dce61460ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91983ce8198b5277b1e9fc35faad815f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord587
MethCallEngine
ord593
ord595
ord631
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ProcCallEngine
ord537
ord645
ord648
ord576
ord100
ord616
ord617
ord618
ord542
ord545
ord546
ord580

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ