82f82e40aaf90777f2b5aebc6bed1579_JaffaCakes118 | Triage

Sharing

General

Target

82f82e40aaf90777f2b5aebc6bed1579_JaffaCakes118
Size

164KB
MD5

82f82e40aaf90777f2b5aebc6bed1579
SHA1

bb1338ba0596924756c579a1b75467c6646a59bf
SHA256

ca29fe72e73a75b32783881b00f48eea11e6627e5d791bdc18c134c380c95755
SHA512

381ea2806ed6ee433d4e1786cc06ac1e5747b98d6ab05a0f374c2da9fd2ac3840a6c4cba7274088085052c5a93584ad6d9cc97cda4378b657b5bd1281d335c6f
SSDEEP

3072:gKloQSrkKgREGCFlJC9oMJnw3UoMfL0CFpYrhg+9pffX5W:0Zf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82f82e40aaf90777f2b5aebc6bed1579_JaffaCakes118

Files

82f82e40aaf90777f2b5aebc6bed1579_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41eb261ef74bd27beec472eb339f3efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ord608
ProcCallEngine
ord644
ord572
ord100
ord617

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ