a050bc138f5186e16ea97a00af107a50_JaffaCakes118 | Triage

Sharing

General

Target

a050bc138f5186e16ea97a00af107a50_JaffaCakes118
Size

252KB
MD5

a050bc138f5186e16ea97a00af107a50
SHA1

aa6380c5fbb3163371d4e5dcbc39b49e220ac745
SHA256

c19114e13795427931c7477f26f2c32903af1ce515461905da4b8c891c34db58
SHA512

10159c37c41bfb62784e5b3c3149ec57fa3e99cbef79ea8dcf88bb1061a56e91061f27bf448020cd77ddc825af07334cf5fc11b8c53b2fadd0625a11f485428f
SSDEEP

1536:3QMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVpSwgepnjqhl:3DX0e1FB/DpKjCLHkVpjb29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a050bc138f5186e16ea97a00af107a50_JaffaCakes118

Files

a050bc138f5186e16ea97a00af107a50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

200973fdddc320c64a7fa337c8b0aa6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100
ord616

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ