351d29e7b4eedc139be32ba7eaf7ee60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

351d29e7b4eedc139be32ba7eaf7ee60_JaffaCakes118
Size

64KB
MD5

351d29e7b4eedc139be32ba7eaf7ee60
SHA1

1f2f50f80e46b6fb928d53d562f9d7a9a4098d06
SHA256

693ae1b0c9173b53abe18a493966cc62641880aa13655dcf26659e215da28a71
SHA512

216808c491771a473f2260d2b7a81fd7134143c18749ae9ff772c2694847a58538246e21eef5df4df6493ac32de4c91011b429ef124cd3447dfc5a1a444b063f
SSDEEP

1536:pKWuewqzlHe41NBqfZc5lSDgpb4xe4A8FTYNq+/4Ry706ibIj:492CZc5lSDgpb4xe4A8FTYNq+/4Ry70k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
351d29e7b4eedc139be32ba7eaf7ee60_JaffaCakes118

Files

351d29e7b4eedc139be32ba7eaf7ee60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60245067266895374047853772bfad91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord716
ord537
ord576
ord100
ord579
ord610
ord612
ord616
ord618
ord546

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ