37e80d50c4f3ac9919c7224f74054cf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37e80d50c4f3ac9919c7224f74054cf7_JaffaCakes118
Size

1.4MB
MD5

37e80d50c4f3ac9919c7224f74054cf7
SHA1

7052e63d31c95c517711f7b185e1d9cb0614a77a
SHA256

7d1587ca38c5361136f1d9ffa13c24f7014d15ed6110803bb3044ddf4980847b
SHA512

be730e0e9b39df40482296e0885149ec5251d3cdd633824f481618a98cae6866189c7acf944601ea5d820c95a770d326479d5f65da883bb0e0bc5d35ad65320b
SSDEEP

24576:qsZfNV803dOR3jKDNvdWNxs3Nukkzp1qiKDlWVqlI2A2Rm9rcdbWqoX:NfNV803dORuRvdWNiNuR1q/DlWcixgQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e80d50c4f3ac9919c7224f74054cf7_JaffaCakes118

Files

37e80d50c4f3ac9919c7224f74054cf7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd1352569303e3b273bd3993f9bd7d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ