89efcea9043bdfc12a3dc0f417036663_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89efcea9043bdfc12a3dc0f417036663_JaffaCakes118
Size

36KB
MD5

89efcea9043bdfc12a3dc0f417036663
SHA1

81fb41de768453a7d67d748df5f73f0ff0ec6a26
SHA256

c2406dc9a6214f7019198adc8430fc494a7a250a21822673b1af912dae51511b
SHA512

ab4533096794450e438200ac2896e315468fed7b7c8d112ebc61b3178672e422a1d6854217c641a8abf1ec9aefd349b4380fd349c52c18f8f3505ea137e6bac0
SSDEEP

384:xNfBrHt5qIAZ5HMAlPev5eFKQh6NUQtnoJ0NOOOOJU9CKzzzsCoQ+X569+nSfWI:bfBDqIG+jUGOOOOJU9CXCoG+n6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89efcea9043bdfc12a3dc0f417036663_JaffaCakes118

Files

89efcea9043bdfc12a3dc0f417036663_JaffaCakes118
.exe windows:4 windows x86 arch:x86

906a0ab6e090169e652c9775379fe6ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ