94d864a7b8451c33cb43695799ef5642_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d864a7b8451c33cb43695799ef5642_JaffaCakes118
Size

28KB
MD5

94d864a7b8451c33cb43695799ef5642
SHA1

b625ec350ce24aef82155f39bb82493980b76c3f
SHA256

3552b700e0e9dfbbe711a62b3c31a1507fc6cd3f98a3fe3deabcc32f0c81308f
SHA512

040415c43b9d3501bce385a64a9c606a387101229c32fe3478a747c98716d37bd678ff67c83b605a539f431a9f409dab4194547cba5dbf64a3dbab409b06322d
SSDEEP

192:10huHLRSqLCxxddTOQIBRAnr6llVl+nIoCBwdSH9ojfHmFfjhpC5ztDRoi+49:1CurMxp3u9z+npQwdSH9ojfENpit6ib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d864a7b8451c33cb43695799ef5642_JaffaCakes118

Files

94d864a7b8451c33cb43695799ef5642_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f7922943228ac87f247864c2fef7380

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord100
ord616
ord617
ord619

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ