33cea0d208d14e4bee69b1c00d220949_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33cea0d208d14e4bee69b1c00d220949_JaffaCakes118
Size

112KB
MD5

33cea0d208d14e4bee69b1c00d220949
SHA1

eb82e3aeb5a52bb7528f40cfce091911b27f674a
SHA256

555da8df3366d16899e2da83ec3f963a2f695a2718b96edebf552db41d0d57ac
SHA512

63ab26f03a5b0668a9a883cbcc0d88355938b8f207f5c79e182e55a307f828aa237d44f4c4f3033164bfd3588279740764f51d7166f94609b91125764d718c4f
SSDEEP

1536:cuYQ5MUef2KGhF6ikuPfifDSXPS6SAohtm:IQ5X/aidzX6LAoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33cea0d208d14e4bee69b1c00d220949_JaffaCakes118

Files

33cea0d208d14e4bee69b1c00d220949_JaffaCakes118
.exe windows:4 windows x86 arch:x86

928f57622014eab53d5dcb80b21c89fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord537
ord100
ord616
ord581

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ