78ecf90e7cb9ad10bb3aea634da33584_JaffaCakes118 | Triage

Sharing

General

Target

78ecf90e7cb9ad10bb3aea634da33584_JaffaCakes118
Size

44KB
MD5

78ecf90e7cb9ad10bb3aea634da33584
SHA1

d3b2c5d8fccf7ff34cadc04c85c2e8a8728cf7d3
SHA256

f729e8c6c9c7767c19afb7d3815513b4419b5a2b2a5c8c862804803c273f4838
SHA512

a0fbe09042c918f5cfe3ae68e716b213a4d08a7dc9c14a16eb0d5d0ff5427c9acfedf8510e6ceb1bbf358c541b3982f5abb71133f5e282cd7ec13f618d35509c
SSDEEP

384:sb7lMtThBAEKHdOgasj2KLRgPOA0NoASerVMAcYle5VJY0FzgVn/Tf1housj2K:s9shZ8j2MLNjvS5YlePJXgVnbfBsj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78ecf90e7cb9ad10bb3aea634da33584_JaffaCakes118

Files

78ecf90e7cb9ad10bb3aea634da33584_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96cbde962a0a7d12e9a04d8ab4512f94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord303
ord309
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord685
ord100
ord618
ord581

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ