703a2b8efb71a8c3b6bcaa20141e9878_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

703a2b8efb71a8c3b6bcaa20141e9878_JaffaCakes118
Size

362KB
MD5

703a2b8efb71a8c3b6bcaa20141e9878
SHA1

c549ed9664be9c23a43ac86841c699576bc818fc
SHA256

fac22184b4889fa6c7868f66af021303bd85908138efa0687e9d5a303a850258
SHA512

2cb9eb3eb8749bee26f8be07e7207b4815840691bbd986c57155625402516b9608e8ae924d6ededecf6e09ee2a5d4b0a3dbe9e01ca0b40efb2a83e6f49892f94
SSDEEP

6144:WqQebYvueK5Hxmje3JQccVkXXXX5XXXXXXXXXXXXXXXXX5adbICBQ18gCQLHo88I:RQch+qXcOXXXX5XXXXXXXXXXXXXXXXX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
703a2b8efb71a8c3b6bcaa20141e9878_JaffaCakes118

Files

703a2b8efb71a8c3b6bcaa20141e9878_JaffaCakes118
.exe windows:4 windows x86 arch:x86

115d73a9e845fbe0ccf4aa187fd5caa0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ