35b261763208878243620c456deb9766_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b261763208878243620c456deb9766_JaffaCakes118
Size

432KB
MD5

35b261763208878243620c456deb9766
SHA1

67e79cda982fb35b62b3834b95d73a55a24beb08
SHA256

cd90cddc8197af659f0f6c6f265ae64a41e0807c042a640fadd47c1f16439011
SHA512

3836e895ae1187df122f590c4791cc48911c8e51ce4c80e4e95582af823807701fff7947ed8683af900a887a2dfd09491618186ba7d9797cde86c24b780b79ab
SSDEEP

6144:x8DmEtPe5QUCVCaYYixxn4UcDwo78DmEtPe5QUC:xsmEBe5pCVYYcN4UcDwgsmEBe5pC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b261763208878243620c456deb9766_JaffaCakes118

Files

35b261763208878243620c456deb9766_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c470bbc47e2409affdd7e0a2fe8511b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord645
ord570
ord648
ord100
ord616

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 738.9MB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ