360faa62edd73cff5ed76e4f820ff62f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

360faa62edd73cff5ed76e4f820ff62f_JaffaCakes118
Size

104KB
MD5

360faa62edd73cff5ed76e4f820ff62f
SHA1

f1e2e5a40ca2156a7d6770bb4f1c21d7d1bcfc02
SHA256

d4d488cf580c636a729dccf70841169362dc97a0037e88e3b5fc562194e5c460
SHA512

e2eae5654c5e24ec890472374bfb33f421a736d881cba1411ddcad041c4f3598b098cab2368d20b3768a3e6cd36f47d139a0e334af98132b8ef973134aa13980
SSDEEP

3072:d1FHOwao/okCuFEI1ZCM1PqG9pT632FszuZMrBlQ6bE:3hZCul2Num

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
360faa62edd73cff5ed76e4f820ff62f_JaffaCakes118

Files

360faa62edd73cff5ed76e4f820ff62f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a0373bbe79e88a3e45974ccf9e9ad78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord656
ord570
ord573
ord681
ord685
ord578
ord100
ord619

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ