a1bbdc262ad4fdac575911752817f9ea_JaffaCakes118 | Triage

Sharing

General

Target

a1bbdc262ad4fdac575911752817f9ea_JaffaCakes118
Size

80KB
MD5

a1bbdc262ad4fdac575911752817f9ea
SHA1

cd3286bd32581d6d5d151dc05cc398775cb8d573
SHA256

a84ff556cd3c9dd723833bac296d4ebf01e4b6541f8b0f24564e9eb9fd4bea65
SHA512

684a42fbc34550d8e1a40b5fcf04a04da96d1e3bcc4f61e1fa2d4b59d292575b440432c2ab22918a4508bb132e0a9e52b9f954c565ef9854a69f80d709150dcf
SSDEEP

1536:Bcc/qvEdTEcAos7BRbVMdYaDqQQrVzbO8IBoSBImv1:Bcc/qvEdgcAos1qqQQrVzbO8Cv1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1bbdc262ad4fdac575911752817f9ea_JaffaCakes118

Files

a1bbdc262ad4fdac575911752817f9ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

403063283543c8b018e0d0067af24e73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ