836cdc843aa611772fb36c5af3b7f388_JaffaCakes118 | Triage

Sharing

General

Target

836cdc843aa611772fb36c5af3b7f388_JaffaCakes118
Size

88KB
MD5

836cdc843aa611772fb36c5af3b7f388
SHA1

339b83232db7517a7902a78fb5b7e0b8ae1ae0a5
SHA256

cc930abe58344d9902ee3bde70834cba85195ffafe41bd65e543d4eb6e28ac4d
SHA512

2aec1a48c0dcf00be8a0b7c064afee84458c517c86ad5cfd52f3e7eb777e0af5bf764a760cd587119e8f1dd0f21e13c991d398708562d613ec469d839925022a
SSDEEP

768:MTBto2RLPEvdwWvVu6DrtWSLXBLPUAw2ZLmg+:OtouLP8dvJQSLxLPbw2ZLm3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
836cdc843aa611772fb36c5af3b7f388_JaffaCakes118

Files

836cdc843aa611772fb36c5af3b7f388_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3014100170185c2b9a504ac2eb0b6840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord619

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ