33c6a05be083d9be694ea8d180f6ef4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33c6a05be083d9be694ea8d180f6ef4f_JaffaCakes118
Size

48KB
MD5

33c6a05be083d9be694ea8d180f6ef4f
SHA1

ec7f63c540ddb72740845bea76518d534125eeea
SHA256

27bf311a5ca3b9a5ff8f462ef5eabc52cd73fea077e2b7fc48588f1b029adaa0
SHA512

ab6a50e5a767e694d7a4d692c79dec1a427b84d4587281c2012979f252f1e340bf4b74305748861a58e130428312505266742e12eb603bea500c870124e908f2
SSDEEP

768:jDfuWFUJknQyotFO7gQBj4OFkdyPUik5L7cJPgVw4A:HfqFyorO7gbOFkdyPUt5aPg5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33c6a05be083d9be694ea8d180f6ef4f_JaffaCakes118

Files

33c6a05be083d9be694ea8d180f6ef4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a410292dbf34624942d6a5ec810727cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ