37ac1b797155313b99bf314d9d1ecb2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37ac1b797155313b99bf314d9d1ecb2b_JaffaCakes118
Size

272KB
MD5

37ac1b797155313b99bf314d9d1ecb2b
SHA1

e007b6c18e239078ee7be694edad9abd381cf748
SHA256

ca1ca3699116ed07ea8863076bced9d37b836c8edb695bba0f691e908a9bd21a
SHA512

e01bdb62eced6ea394b187fe0e9af9c05f8e571cc4fb63f0fe922f9938accabfe70b5eb623f2f7452cf7fdc98d7806486c14df1b1abcaa11ef2ae05b6550a2b8
SSDEEP

1536:w0UMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHdm+c3lzspT/BqV:z3X0e1FB/DpKjCLHgpT/BbWdtkKmrHhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37ac1b797155313b99bf314d9d1ecb2b_JaffaCakes118

Files

37ac1b797155313b99bf314d9d1ecb2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6bc41d87f40fb3a336955c7892636dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ