82d0b2b5d3b64c18ede71eddeb9b3815_JaffaCakes118 | Triage

Sharing

General

Target

82d0b2b5d3b64c18ede71eddeb9b3815_JaffaCakes118
Size

28KB
MD5

82d0b2b5d3b64c18ede71eddeb9b3815
SHA1

38ede1f1f361783b5e7e1a5ee29bab39338ac336
SHA256

9e27b24489c0c6b7252d3567ec9d7d2ea364c14cc12b5082ff98b758464f25c8
SHA512

678f5f01ddcc898fedf46dc7f09c88ebe733470ca682b086c4fb5308df707c929347d56b2403b52d2b7e4764e410ed1d994e6ff70acd2dd385cbe26e9f7d5673
SSDEEP

768:K/qgQlO0Q1O+we/Cl9a+XQ0oxtYsAqf02+087:KSniLwtZXQHa3qss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d0b2b5d3b64c18ede71eddeb9b3815_JaffaCakes118

Files

82d0b2b5d3b64c18ede71eddeb9b3815_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ab7d480d72238ba8555419f99f6cd33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord667
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord535
ord644
ord645
ord571
ord100
ord617
ord619

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ