37d1714d42d6494525ab8a738cb7ff33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37d1714d42d6494525ab8a738cb7ff33_JaffaCakes118
Size

65KB
MD5

37d1714d42d6494525ab8a738cb7ff33
SHA1

bdb80f6ff0c8465a50bea071a46827975d06656d
SHA256

cac52cf4c1fcdbf2c9ff4449c448ab018f77244f772cc0821262b2a1a6e06f14
SHA512

d4157724a9cdf1a201d77ae2ccadc18d378a687f76ba6a41944d98f732c9a37143b9d9fcfd9c470fb79ae5f2ddedf1d9fc0b10a5eab6b9d6a3f9af525110cbec
SSDEEP

768:HqBqjQgL5gq7Viy92c5yS7oJEpE6SLfwn4OjLAinHTwmjsYLBhkv8tlBQP:uqci5g4iy9TEmk45jcizw1ekvW2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d1714d42d6494525ab8a738cb7ff33_JaffaCakes118

Files

37d1714d42d6494525ab8a738cb7ff33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78a20a1dc4f9ebbe517ccf675ea8abc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord616
ord581

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ