a0e30c3d914349007ba0ee351f38a286_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0e30c3d914349007ba0ee351f38a286_JaffaCakes118
Size

32KB
MD5

a0e30c3d914349007ba0ee351f38a286
SHA1

49202583140d7813b346a49b61c16e6bd5dcf5e3
SHA256

6af9800f91c0c0a18913e8afb9bd17b1fcbe0d3cce8d8acd2891b42544aea372
SHA512

7e234367897da0fd0f8f3332b4a8a2175084a60b6974b542cefa23453656edfc0aeda030c5a18f34b231c58cb59ff15f13e63d4f24df642ab54ef61b07ee7e85
SSDEEP

192:J5Cjzl7bBTM1cc94u4wtD7mGE+5M+mQMBdABwU2wKACgMGrXXNQXoLtDnXorInX5:J5Cjz7iG2tD7HExQnSwjCMGrdrEFKlH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0e30c3d914349007ba0ee351f38a286_JaffaCakes118

Files

a0e30c3d914349007ba0ee351f38a286_JaffaCakes118
.exe windows:4 windows x86 arch:x86

840d010528053706ea6bf67601f29d4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ