710bb27dd023a78367f650360a9b3779_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

710bb27dd023a78367f650360a9b3779_JaffaCakes118
Size

36KB
MD5

710bb27dd023a78367f650360a9b3779
SHA1

2a7d00ed327e71a48b0a50c71b81151439c83f6d
SHA256

03318d26191b312dafec44f1a11f220f59d9d092242ef816bf372c979576d760
SHA512

de8191df7c91da671ce9fd0ed2d49547e6071d2e6bd1b95b0e1bce23810c8084f0ecf91d593f17a217543db4d7caa4f0c1057dfd5ada9a636bbb5c8ca5558a9c
SSDEEP

768:U3VC4i15+rENDa/51306TAfVZvZkrTYAV:rC4/Zkrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
710bb27dd023a78367f650360a9b3779_JaffaCakes118

Files

710bb27dd023a78367f650360a9b3779_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5877a6205ceb7b008be8600858ff1fc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord715
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ