949872d3ed5b587b4e1599713aaad983_JaffaCakes118 | Triage

Sharing

General

Target

949872d3ed5b587b4e1599713aaad983_JaffaCakes118
Size

32KB
MD5

949872d3ed5b587b4e1599713aaad983
SHA1

3bfe7bc2e7c4de35bf648522576dbc37d5be8a27
SHA256

0f4d38736ba0c91d4c4b208dfce9a0ab2b26dbc44fde6488529acc712f193d2f
SHA512

ad383328c0b4a0c706bb7298bc17eb6fbc8e9772ea0a8b897c9859dc84605051f7bcdf25e8e182c2970a17d70fa34d275bdfe07b81ac9d5f2697cb5d955d0aaf
SSDEEP

384:jC2vY3xExHbnHTJ/H5+2rG7aV3/0tKIm2HHxv52IskiwTx9i3:jprxHbzLTrL3stKIbHHj7i3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949872d3ed5b587b4e1599713aaad983_JaffaCakes118

Files

949872d3ed5b587b4e1599713aaad983_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a11012d98263022440e0bfbbc4366d32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord518
ord660
ord593
ord594
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord535
ord645
ord539
ord648
ord576
ord578
ord100
ord579
ord689
ord617
ord619
ord546
ord580

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ