9653da801e46cf8cdb9fc6eea53dfb33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9653da801e46cf8cdb9fc6eea53dfb33_JaffaCakes118
Size

36KB
MD5

9653da801e46cf8cdb9fc6eea53dfb33
SHA1

e68f23395509ffdbab651510dd9125511d382aca
SHA256

5fccabf2f3a9321980e1d46ef367e26d770cb354aa71089706d2af71e41dea28
SHA512

4467336f54587bf4ec12e3c0df279fdca3a6de7621b1e6c4215d79e3ce71682fc3178e6fd4c6478c2476f2263407f0c0af27b95250b5f3a73291518e4aec21e2
SSDEEP

768:MZWOQ4ZlqBivMS9999999999999999999999999999999999999999999999999:OnQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9653da801e46cf8cdb9fc6eea53dfb33_JaffaCakes118

Files

9653da801e46cf8cdb9fc6eea53dfb33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b950aa09c95c056bb9d3daaae041a11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ