833a0eeece9d36d349e480df10fef819_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

833a0eeece9d36d349e480df10fef819_JaffaCakes118
Size

294KB
MD5

833a0eeece9d36d349e480df10fef819
SHA1

a31510b7e1e8284ac514af6678745b0294181af5
SHA256

c41cc45f4040eb83d56aaa34f5d524802ebaf0453dd619845a29121c53f91d6a
SHA512

035f1a39f95f4ea2f567b827120403e666cca85d4ba7e47f75a14f630ed2678a2d4c4369979509b407b068f0e3cb1a3bb71ccc6bfcf2a24c0d9d84947faa89a4
SSDEEP

6144:DbtZHxEx2tk7LLSoMb5LeeTzMcDJ94I78F0JD5LogUtD:PtG7Llq5iON4I+RgUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
833a0eeece9d36d349e480df10fef819_JaffaCakes118

Files

833a0eeece9d36d349e480df10fef819_JaffaCakes118
.exe windows:4 windows x86 arch:x86

560ada3e895ae3ac1685db5571ca73b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ