957e3e124ef70366815a5969e94568b4_JaffaCakes118 | Triage

Sharing

General

Target

957e3e124ef70366815a5969e94568b4_JaffaCakes118
Size

24KB
MD5

957e3e124ef70366815a5969e94568b4
SHA1

404da7e7f9ec9ff8073f97b5fa134b6cc17e22bf
SHA256

a94707eb1c7bec264d41e17c16ff4390104027c48b2d802328835fe8dc9009db
SHA512

9ca90e4a3e92c68cb9e7b2ecab9232cea01aabc23c2c033fa60377b446b4f36545e7dd86443284a85b830d5371da499429732af89cf341d56b395b1b3464a885
SSDEEP

192:Ustt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:UsttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
957e3e124ef70366815a5969e94568b4_JaffaCakes118

Files

957e3e124ef70366815a5969e94568b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ