895f7238159d86e971798ea2ed7cd53c_JaffaCakes118 | Triage

Sharing

General

Target

895f7238159d86e971798ea2ed7cd53c_JaffaCakes118
Size

720KB
MD5

895f7238159d86e971798ea2ed7cd53c
SHA1

03bb58aaa5693ae5c940e4ee2f056f24a753acc6
SHA256

46aa84358a317983b7ee5aa77ef08f6c63b41e4954dbfc7a508fbf38c1560412
SHA512

5e86821d85b31d699384f1db3d4f8b913e8f0a8d558901aabc286055572a4933b23d5d0cad26aaadf36fb9459abaaf21f8af6114395f8f043fec750997333264
SSDEEP

3072:Th50xDuIcgV//U297BeCWeoDq2c4EcjyBpi7UWd2lpHOCnGwBB0ObzEge5lRcKXl:9GDl1yCj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
895f7238159d86e971798ea2ed7cd53c_JaffaCakes118

Files

895f7238159d86e971798ea2ed7cd53c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de358285090700a8e0ed4c6b0ae2b4c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord660
ord661
ord662
ord593
ord594
ord595
ord596
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord714
ord608
ord717
ProcCallEngine
ord647
ord573
ord681
ord685
ord100
ord610
ord612
ord617
ord619
ord543
ord544
ord546
ord581

Sections

.text
Size: 712KB - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ