9499235904f39c6f3edd38d9bc7a0819_JaffaCakes118 | Triage

Sharing

General

Target

9499235904f39c6f3edd38d9bc7a0819_JaffaCakes118
Size

28KB
MD5

9499235904f39c6f3edd38d9bc7a0819
SHA1

c892ebcaa9026d3e29a4dee9c724d4b45cfd7e7f
SHA256

d27f0bba951412e4bb88c919e54ad61f9244c0aa6d211e376b5848d296adedd1
SHA512

56b23db2bfd17526789bc03f15f3e402665b9da793711ca3267bcd40bd047e2d6a071c1987410bace2819553e513352094bf4ebe0115c6192bb268ca58fccc7f
SSDEEP

384:Izms1b6bDSmpwdwcxmBktoVC6vnGRnZ6Fa9dULok:an1Kdp9cxZoIenGRnQFHo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9499235904f39c6f3edd38d9bc7a0819_JaffaCakes118

Files

9499235904f39c6f3edd38d9bc7a0819_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faae537076cd43809297ce1c289a2451

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord666
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord537
ord648
ord681
ord576
ord100
ord616
ord617
ord618
ord619
ord580
ord581

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ