328b8260e84bc76d375e64e9a7317fb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

328b8260e84bc76d375e64e9a7317fb0_JaffaCakes118
Size

12KB
MD5

328b8260e84bc76d375e64e9a7317fb0
SHA1

80afd4911129375d6893c124cdf92a06d35ede1e
SHA256

5a5b90123000ef19e59ee9373edf3ff970d1c6a1bcd9fedd6d0672069ab51e13
SHA512

bd63cb1f162c8bd7fef3aeca09bfea1b8b031930462763ba4d76d4ab8d73378cfc98047f92f72ddcb8849cd7b8a002fac02f4ea7ab5ccfa632c68032b8aa383e
SSDEEP

96:Kdo1k/OU2APSyVgLKlAXt/2YZ+6/TX2EE9pizPlP:V+/OU25yyLKlK92b6bXKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
328b8260e84bc76d375e64e9a7317fb0_JaffaCakes118

Files

328b8260e84bc76d375e64e9a7317fb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3e5507e3f3e8b394ea9431b2fc72dcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord645
ord576
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ