336fcd7d8bf522aaade7876fe974b187_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

336fcd7d8bf522aaade7876fe974b187_JaffaCakes118
Size

28KB
MD5

336fcd7d8bf522aaade7876fe974b187
SHA1

6c5b638fd9958307e2f7f748f72408973b57dbe0
SHA256

7d49e30f7d5f3496434956056508978dc55d1407f6645dcf37c896dfae2696f3
SHA512

f02f32ad66fef2cc7002ac99678650a659166a4b6731f35845760cd875e30dbb8294c87d986dd585d90b55e45e20771be3b03af9fb3513c8a945db519b86630e
SSDEEP

192:Bb12+POvvWCm6TfoXvv48UDiiN8Ey0GDTQh0nb7VOX7bQ5oKila2CWWHY9utRYgy:BJNLh/vXgiQmViwLilxCWWHYYtRGKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
336fcd7d8bf522aaade7876fe974b187_JaffaCakes118

Files

336fcd7d8bf522aaade7876fe974b187_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7825319ea1befbce6eeaa4e8702e10a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord519
ord595
ord598
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ