665723a06cb7580ddfe25aa94adfa36c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

665723a06cb7580ddfe25aa94adfa36c_JaffaCakes118
Size

32KB
MD5

665723a06cb7580ddfe25aa94adfa36c
SHA1

a19f26e88f038facbaf1e42eb6a4929d96206f9b
SHA256

4359f1dd979f92341b791808dbfb0c308a440e109c8462c589efaed4cb63a09e
SHA512

06e8318299d2693a31cedb1570c2807015e1314827a0209b13c072772eeb053600a9735d886ab95ca4c39b16ce6b5e0a35cdf6771d199c194f4c0358c7039eb5
SSDEEP

192:LiPLQuzNT+0USLrujKSgMTqnds7Xz9dIn+It/oGzqv+ItdjlhUI6lh+IooItxVKV:+Tb00swMuds7XzY+vUmkPtCs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665723a06cb7580ddfe25aa94adfa36c_JaffaCakes118

Files

665723a06cb7580ddfe25aa94adfa36c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

455e3c87c5118c04ced3f6d538c9c2e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord573
ord578
ord100
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ