93a0973e4a642113461e74d8c1e1cd80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93a0973e4a642113461e74d8c1e1cd80_JaffaCakes118
Size

572KB
MD5

93a0973e4a642113461e74d8c1e1cd80
SHA1

35c99ce15ac67f74803b8fb7e78c54424cae5901
SHA256

5a9bcb46e43cd4bd4cf018040e362fc7da9828ee1e4477ea2010b3d2272aff79
SHA512

7caeb29f21793d5d3bf8b92455a1fc5e1fa6f9d550a9ea920aaec33952280a313578d70491fae617fc955d22b1e60e8debea70f509d93eb5c1edf683d4aa596b
SSDEEP

3072:KBi3gBi3VjbYd8MUhYYYVYhYYYgjbYd8MUhYYYVYhYYYO7cO7c8mu8muG0eBM5lB:blJ9MUv9MU/mOB03HSFed9MUHJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93a0973e4a642113461e74d8c1e1cd80_JaffaCakes118

Files

93a0973e4a642113461e74d8c1e1cd80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cc6292b8e85f9a9a54a38c459afafbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord667
ord598
ord709
ord631
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord572
ord681
ord100
ord616
ord618
ord581

Sections

.text
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ