335212051c562ed029079eecd00c3393_JaffaCakes118 | Triage

Sharing

General

Target

335212051c562ed029079eecd00c3393_JaffaCakes118
Size

32KB
MD5

335212051c562ed029079eecd00c3393
SHA1

3e4a5e3bc534734078231e1d6d53d75633b2bb11
SHA256

50f32726b78e6a41aa2e9f77a192492118a61b1ee041be8ab896aa5ae793cef3
SHA512

ae2bbe59874d4e692bfc8264d64df9eea78f2803042f4eb6da2e4dcb65ca010d482d992f0bddff3371d5787e979d6b04d232f72d6f5aa13b6a03838b30767ff6
SSDEEP

384:LrXeSv+0sexD/s7b7Go/gkZlWGlVgoY1ZBZ4qhnYKTOH:LLeSG0scqPGo/g8lWGUoqhYKT+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
335212051c562ed029079eecd00c3393_JaffaCakes118

Files

335212051c562ed029079eecd00c3393_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5c8aee02ff0fc887b93f482a6327f9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ