75e64bd3f287cef0a89909513800db54_JaffaCakes118 | Triage

Sharing

General

Target

75e64bd3f287cef0a89909513800db54_JaffaCakes118
Size

36KB
MD5

75e64bd3f287cef0a89909513800db54
SHA1

834a5256da851d44104784326d66b7ff46be1620
SHA256

f032fbd9817af4784d0d19fb4fa8a158db63828af8e327623024516a542c64a2
SHA512

917e5f220b9dc2740886607ed7039181bfaca22044b0a4fe903ff0639ada4fdedaf709bf007dbadc81400ec14126350040eb5e091b1f53f57d4a54919510f676
SSDEEP

384:dz3lYmynju6bMkL2HtpeyXPk6h8HkhgUWnjyWks:xlYmyj32HtppPk6h8HkGl2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75e64bd3f287cef0a89909513800db54_JaffaCakes118

Files

75e64bd3f287cef0a89909513800db54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

658e34a5cdd932120b247a39f4a0d8fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord578
ord100
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.upu
Size: 12KB - Virtual size: 4KB