36b5f64f000db18ac436c4fc3ca461de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b5f64f000db18ac436c4fc3ca461de_JaffaCakes118
Size

248KB
MD5

36b5f64f000db18ac436c4fc3ca461de
SHA1

6bab88f7e3a3fc97af2136fd8c051bb9a47de8fc
SHA256

5da7b62dcf17f9ac13b70d745de1c55b7f4ae02f2a202e2e0d5d478015783169
SHA512

74ff308a6f8e1e23857b390bd5f456c7bfd2da33521d736c5f6efeafe58a2be96c0ab959755e2e79663fa2b4f72fa3f1f5bbc1b959bad80c4b72099d5ce92580
SSDEEP

1536:AMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6w6mMLDZ2oN:TX0e1FB/DpKjCLHA6mUZ4gbt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b5f64f000db18ac436c4fc3ca461de_JaffaCakes118

Files

36b5f64f000db18ac436c4fc3ca461de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

927c965eac85aa6896015e6b2a18b0f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord518
ord628
ord631
ord709
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord578
ord685
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ