436a5dc35ac6708c2c44de0def8a5372_JaffaCakes118 | Triage

Sharing

General

Target

436a5dc35ac6708c2c44de0def8a5372_JaffaCakes118
Size

166KB
MD5

436a5dc35ac6708c2c44de0def8a5372
SHA1

d4d5185808afbab0f8457b56ea13ef605f2b148b
SHA256

2ae39fe94301bab47aea05ab4e121f025b37d1bf331723b7e83bba7006fac609
SHA512

84279699f253710bb2111c9bbae0c820d212c6388e854ca86499fe53998791376db98cce7df90cfa40fc490aae8dfad07589ea84847bd9fc8ee1fc19b83c5ad8
SSDEEP

3072:gdJEwOT0c3Ty4VjGTS8VE5TlhKwcrD0k4cosUzHvEbgCOo/LlKzF7:gnQ0c3TBSVE5rcrok4RzsbgCOo/JC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
436a5dc35ac6708c2c44de0def8a5372_JaffaCakes118

Files

436a5dc35ac6708c2c44de0def8a5372_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ