88c0ba0634194cd38299cc769b940395_JaffaCakes118 | Triage

Sharing

General

Target

88c0ba0634194cd38299cc769b940395_JaffaCakes118
Size

200KB
MD5

88c0ba0634194cd38299cc769b940395
SHA1

b7a4eb549a50bad99f7b21c66793609edbd72017
SHA256

4733036cdd33710c38fe9a7df00272662f230d48235d5e0ecdd2c927b15a0ec3
SHA512

a9dfbd3448ffadc77dd9d0aa46e770647cd71cfa53d778a3da1b28b8af8c1ec9af3652ebf0ad365e1dc9b48c1e32e40d751df3a3678d7ff423aa8c48f0789941
SSDEEP

3072:IYNxSSMFa643Ad4xLPctJO12f4PLjmNDtiY5fCKjlfX1fRZtJO:Z3AOy4jjHcfvjl/1vO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88c0ba0634194cd38299cc769b940395_JaffaCakes118

Files

88c0ba0634194cd38299cc769b940395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ad99802b608356d885781609be432eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord300
ord595
ord599
ord306
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord537
ord645
ord573
ord681
ord100
ord616
ord617
ord650
ord581

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ