a55d51164e4b9124dea850e69f68ec35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a55d51164e4b9124dea850e69f68ec35_JaffaCakes118
Size

24KB
MD5

a55d51164e4b9124dea850e69f68ec35
SHA1

a6178943586c2243d5b956cba2ff42c4497c8ac7
SHA256

79a5131c458af60f400512798db0f3afb83cb4bd0bd2010a47400a8acef72f7b
SHA512

e20a145aefdb543e6cc333f440f80e0fd7fc4c8c8e78da7ba4849ca378346b7a3b66efb69e5f6e990019cdc259a866c33eef5f6c53ef02cdea7283208871f2ac
SSDEEP

192:DlK+5BqUgDQdI2rPBWNx2FYdWJITrneVXuEW6E7ZZe:DlRqVDSIysEEeW6mZZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55d51164e4b9124dea850e69f68ec35_JaffaCakes118

Files

a55d51164e4b9124dea850e69f68ec35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3accf752917c7298a4eae1a3b0dbce65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ