78ddf0f2f0b4764bbc543d7a63f780ce_JaffaCakes118 | Triage

Sharing

General

Target

78ddf0f2f0b4764bbc543d7a63f780ce_JaffaCakes118
Size

24KB
MD5

78ddf0f2f0b4764bbc543d7a63f780ce
SHA1

ba139cbc1b96ef98beb6db421ebbc9fcc306c29e
SHA256

481d2c02f35dca918f536d6207e45c0a05bd4414cd88548297cbbf16c746cd76
SHA512

6c2dffd0a8d76cff7e5daf7f412370dfe31f79182705c2b83acd6e05bd0c1872183a198463e1f27ac098858388de7e2809db8ac9fd4248beb65f24511c634643
SSDEEP

192:BAGny7Twb5riyf3FRfVz0BbkFFDKpd/eWeCwCny7Twb5riyf3FRf:BAB0b5+GPphKpYWQt0b5+G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78ddf0f2f0b4764bbc543d7a63f780ce_JaffaCakes118

Files

78ddf0f2f0b4764bbc543d7a63f780ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b6fdd53fb09fde35d4c4c12d360a280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
ord529
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord645
ord576
ord100
ord619
ord542
ord545
ord546

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ