93aa6d0616320af99152facc6ea33176_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93aa6d0616320af99152facc6ea33176_JaffaCakes118
Size

84KB
MD5

93aa6d0616320af99152facc6ea33176
SHA1

2ed15595e809cd596743cafce770338399951506
SHA256

c0f02c9bb04f175e3bb6f34f9a0f0b6ceacf46ad8d5d992196763c8cd710f5a9
SHA512

bf45698b1cb4c459f1f05f5133384aaca609125e979ef10230d82d7ba0440fd40f1a026fb919125c19f5c57da2c4f090c10b4d786f26e3cb7ca312d6ed9d8537
SSDEEP

768:SKUKsgj3koUbjr0wNzirg4tTiybC8XUuLPdYPPOqQ2Vc9pbmZ6DA9MMr0j++o5KQ:zJd6MbbC8PLPqC7baMTGcm91j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93aa6d0616320af99152facc6ea33176_JaffaCakes118

Files

93aa6d0616320af99152facc6ea33176_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec6b4bc80abf275765477b3b0cce0deb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord516
ord628
ord665
ord593
ord300
ord594
ord595
ord599
ord306
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord644
ord645
ord648
ord571
ord573
ord100
ord689
ord617
ord650

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ