85526ce62639eb28f1719b7a7fcf25af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85526ce62639eb28f1719b7a7fcf25af_JaffaCakes118
Size

24KB
MD5

85526ce62639eb28f1719b7a7fcf25af
SHA1

8c4c761ee8d5f63b32f973e29ac9c68b2f25185e
SHA256

b548f7fb39fe782734d93e8196779df2ddb514ae2a9c0842af0be49295aa51f2
SHA512

ba15aee983d08c81228d0e3390e07c94a19c2736d792e1b72f864ce97a3fe61681a27b9e62441854cd5b9c3aa89eaa6094112bceca3659b176580ce07f0b6f66
SSDEEP

192:82WsJXOOs6W4SmJ8kTCzvItgeWOYh6daSpiPnH33UTH1:ZWs9tC2CvcWrQaKiPnaH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85526ce62639eb28f1719b7a7fcf25af_JaffaCakes118

Files

85526ce62639eb28f1719b7a7fcf25af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70bf5d5f2105131d4d0edf48cb40d2a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord536
ord645
ord570
ord576
ord100
ord617
ord619

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ