82d56b210cde75af238af338d116b7cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82d56b210cde75af238af338d116b7cb_JaffaCakes118
Size

28KB
MD5

82d56b210cde75af238af338d116b7cb
SHA1

2bf85c7e3eb6ae4a9ee049d21571a4dd651a3b4d
SHA256

cde49933665f0b9f2fa98c749e5a6fbc0b00f6ee4b37ccb23e73879205975822
SHA512

c07893c54612adc16e1f2f0db8cf4dd3a6bbfbcd2cfb43c34a0e8701096334306670521cc6c27a8aa9319bf15c3e494cea8d2c3d3f90813ba750acc17bbce35b
SSDEEP

192:khFldjC6Dxh+aQ6GgMSBmQlEm52Nw+s97I+9W7l9FJcSD03jADFltltmaFAOXeex:gXdjC6DpHrGwmwlk7PLGeAOXeeWOX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d56b210cde75af238af338d116b7cb_JaffaCakes118

Files

82d56b210cde75af238af338d116b7cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ec53856631061a3276c9a707e3268a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord613
ord619
ord581

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ