37d2096d7dd99029ce0856834799b603_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37d2096d7dd99029ce0856834799b603_JaffaCakes118
Size

40KB
MD5

37d2096d7dd99029ce0856834799b603
SHA1

78599966fb819d47f1264c2608fd22afa3194f68
SHA256

181568a8836d0fc1658565038e8672466c757f5feb9effe09dd5d009bf9d4425
SHA512

e07b1d200d4860f2bde764cf971ac2bdc620feed18952de4b48c44ebd6160d1e4a5d50ce9a33d0b387d496dbc49a430c93ac937f0f53175ff376c17ddb54346a
SSDEEP

384:nT61287Ip0oo+2pSr8gmMp/28poLIokwfq7XWYkDB2l3IErQPIz8cZiVWUEOkVsT:T61287I2+cSuMpu8PwTDqP6E/VKOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d2096d7dd99029ce0856834799b603_JaffaCakes118

Files

37d2096d7dd99029ce0856834799b603_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a39604757b0f7d602998edc71a17f26b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord595
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ