94505bd911cb234dcb3636913cec3928_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94505bd911cb234dcb3636913cec3928_JaffaCakes118
Size

104KB
MD5

94505bd911cb234dcb3636913cec3928
SHA1

baf57a5b803d32924ad1a286fa8aa5c9a0fab3c6
SHA256

9031610d955f3ff00b708febb01e827609df0c030a458d8b01c882b53d197f21
SHA512

d7da73a47c6413da86c93ea49857effbd7c88e1985073907f91984a8cc8ff3af7923164f88680defe79b0f346c5f9db6a5fe7b28b2d448be1fa5cc4c0af337ac
SSDEEP

1536:sh1WiNQ4HeUhqpl1ylkv3Cd1rK6TWNtzeoq4eEyBNl8UjqGPfw:g1nNQCkkU3CG5E48l8afw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94505bd911cb234dcb3636913cec3928_JaffaCakes118

Files

94505bd911cb234dcb3636913cec3928_JaffaCakes118
.exe windows:4 windows x86 arch:x86

555675564b206c3ca43d10c19efe906b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord667
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ