a15f260e444b3483e2f6032a3eab6831_JaffaCakes118 | Triage

Sharing

General

Target

a15f260e444b3483e2f6032a3eab6831_JaffaCakes118
Size

68KB
MD5

a15f260e444b3483e2f6032a3eab6831
SHA1

836e4e34ee9f1b0d3be1852d13aaed1544953dc9
SHA256

dbec1cd74d0edf8e8dca8346a0ef5240429c2e7a24cf548a2ebc8840ca834025
SHA512

ff76b6bb2d3f7090ef47e3d0327a0ee82a48745d2b4de88150d0cc6b385f90c97336bac1d377562b765288e34f0ad9f00c6227402e1280fe90a768c408b67f33
SSDEEP

1536:wkY8rF6Fjs2Buk40uJ8JFse3r/FQLTIof8fOD:gaF6FISxuJ8J+UWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a15f260e444b3483e2f6032a3eab6831_JaffaCakes118

Files

a15f260e444b3483e2f6032a3eab6831_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5bb34f113ac883990260222a20fd344

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord303
ord309
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord531
ord645
ord681
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ