96a657e39e49deb017c8d56b3744f55c_JaffaCakes118 | Triage

Sharing

General

Target

96a657e39e49deb017c8d56b3744f55c_JaffaCakes118
Size

468KB
MD5

96a657e39e49deb017c8d56b3744f55c
SHA1

cc86eb4f1c07f5fa6bf85618dd87479d16c3eff0
SHA256

e0917bf89d0ec9b988f56dfc4637a7c6fe891823f1e38537c641c3bfd0800107
SHA512

d05a5b95b6de7e4916b9ddd8591d79221761956142f3198e5008cfce828a72a91f7f8dd43f6da2d759e16c2963e422cca54d2145d79bd74f1afa9f816b0945a7
SSDEEP

1536:G3PCCooceTgUTMHxKbWnl9KaaUGbzAdwl9XKbWfUTMHx5Coocel:G3PpTT7TMRKilI3HzKeBKisTMR+Tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96a657e39e49deb017c8d56b3744f55c_JaffaCakes118

Files

96a657e39e49deb017c8d56b3744f55c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

00939686e7551ef01ca5746e8987aa7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord667
ord595
ord598
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord645
ord647
ord648
ord576
ord578
ord685
ord100
ord579
ord619
ord580

Sections

.text
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ