833e265547dafbf1272b988bbfbfade5_JaffaCakes118 | Triage

Sharing

General

Target

833e265547dafbf1272b988bbfbfade5_JaffaCakes118
Size

76KB
MD5

833e265547dafbf1272b988bbfbfade5
SHA1

9c141d3d32b2d9c848222245c145c9216c8357cb
SHA256

823a26d01648a429dac0de1cf0efa6b48e378e54e27d10109646c3cb10e128e5
SHA512

de68f283f1ba910dde53ad759a220c306ab0c47c95fa5261203e5da8bde44d39b01dc19a95d9fbdf032cfbfa7d1db328fee702bab2d0baf8f5a17107339112eb
SSDEEP

1536:w4rZTrAq5D6xiWdHgldWDooZ4p4lWDSIU4q:M+WdHgldWDo4FB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
833e265547dafbf1272b988bbfbfade5_JaffaCakes118

Files

833e265547dafbf1272b988bbfbfade5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e55f4f893a56386097842ffd6adb193e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord626
ord593
ord594
ord595
ord303
ord304
ord598
ord599
ord309
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord314
ord606
ord315
ord607
ord316
ord608
ord716
ord531
ord717
ord532
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord576
ord578
ord100
ord616
ord617
ord619
ord546
ord580

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ