a24aa344c509597dbee693063504e5ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a24aa344c509597dbee693063504e5ad_JaffaCakes118
Size

680KB
MD5

a24aa344c509597dbee693063504e5ad
SHA1

ca1c364d481d8a5dcea49e2bcebc476f895e5d6c
SHA256

92a65473f4e2d89af19520e091ed119962ac9fca6f3bc05f4764452e7a94badf
SHA512

adb4a653693ea00e5d63efdd572cf8e63e9c1d5298dd3488c7389da793a8e03a0f45e6a5cefe4112a0b84f1e2a9a5a1e7e43bf376f440b2bfb066c94c1faf305
SSDEEP

3072:dE9zdR7qkSUAOx9rNzLFp2FJS0kHTs3D4S9TupBqGJ4vnILmkXwfaERuOW20VZZY:EJUzFBPzFBy1Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a24aa344c509597dbee693063504e5ad_JaffaCakes118

Files

a24aa344c509597dbee693063504e5ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f40e9929487081739bcd114f8a834c34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ