95f443c7657b9602acf6badd4ea6ed8f_JaffaCakes118 | Triage

Sharing

General

Target

95f443c7657b9602acf6badd4ea6ed8f_JaffaCakes118
Size

140KB
MD5

95f443c7657b9602acf6badd4ea6ed8f
SHA1

f8581f3869b1cc80c08a9c0aecb56fc8808f4380
SHA256

5b9c8842a7271a2097ba79b0bf1d2562b9c9f577188101c1ac45617e8d7d4dda
SHA512

3bece9c8544c2b8202b6b33f176bc9aa109a84af9bab3020685eff6f8cf0057d78ccefb8bedc68b3d9d9de3d44c1a8b2b03470d71b188a9c7d710c73c9dcc305
SSDEEP

3072:unAaCapA1nnAH3uFEI1ZCM1PqG9pT632FszuZMrB:uKGul2N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95f443c7657b9602acf6badd4ea6ed8f_JaffaCakes118

Files

95f443c7657b9602acf6badd4ea6ed8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e16f8cd36f4e2d3f7583af15e2c9eb78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord572
ord573
ord685
ord578
ord100
ord619
ord581

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ