a43c31af573ea124e3ddfe2014909e8e_JaffaCakes118 | Triage

Sharing

General

Target

a43c31af573ea124e3ddfe2014909e8e_JaffaCakes118
Size

1.1MB
MD5

a43c31af573ea124e3ddfe2014909e8e
SHA1

27ab71eb84828eb57043e7a8a28a05b16d4764a5
SHA256

37eb065feb6bef20c815e610c7b38e260a184fc7d20f588f2e8899df272722bb
SHA512

d7f798821a366490e2fc1d5007353fbc36de0a9de10f26b9dccd6687b56a7ce365fa67c54a7c0a692f67d3f96b96c03e5319f86fe333fce3be3c07195d1b3838
SSDEEP

24576:+C0LiK1d6dxOehwsj5dC33M/jYVRDSfaF0gg1CVGO7oVtNK:U6dAehwaY19G1u7+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a43c31af573ea124e3ddfe2014909e8e_JaffaCakes118

Files

a43c31af573ea124e3ddfe2014909e8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca9c54404833cb9819f31c3bc82ff34b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord519
ord666
ord595
ord598
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord681
ord578
ord685
ord100
ord616

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ