790af4c1dc0e9139cc0ae225fdac90ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

790af4c1dc0e9139cc0ae225fdac90ef_JaffaCakes118
Size

232KB
MD5

790af4c1dc0e9139cc0ae225fdac90ef
SHA1

371a678dddb026a32142e52e06f98e2a1c4d4390
SHA256

3e14c4242f6ba548861fe533a8ed1619557ca6e8425db794a085aa4434717e97
SHA512

b31bf98280c4465d0621ef54f0c40ac9297267faef043ccca6c7d89cabcd9bebbf9bc8fcaf669d18f2eb51e2f4d29496a1c6fa0b8d1340555189ce22ecd56a56
SSDEEP

1536:BM/PkqugyQ726S4sEt6l78NiLIJSzDxCmYwqBGvvkx9y3N9D+Enp:BatugrFHu6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
790af4c1dc0e9139cc0ae225fdac90ef_JaffaCakes118

Files

790af4c1dc0e9139cc0ae225fdac90ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61226973a55bf5c4f53b6ea0ac64ccbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord594
ord595
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord644
Zombie_AddRef
ord573
ord681
ord575
ord100
ord546
ord581

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ