a639fbdc380e72c220eb1bd19b7484ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a639fbdc380e72c220eb1bd19b7484ab_JaffaCakes118
Size

324KB
MD5

a639fbdc380e72c220eb1bd19b7484ab
SHA1

155d385e8e47abaeeb547e6d5391bb7306a3195f
SHA256

75917002604aa5d0c151d4343516c1aa46df4c62743e2411b5155f783f6c65c5
SHA512

0bc645d21c123a0eefcc87d0420a299d449b9fbce5928e22468dce45cad9c79cafe07cab1b3dc7295afaa184e1b896d02e5b66bc8f600a6729a85c2ffacfcc39
SSDEEP

6144:FjYW9I0kk4kk1kkxeJDW9I0kk4kk1kkxdeRTkBOPMq9g/eDcMeloiTfhaBST:FjZJte/9oeDQlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a639fbdc380e72c220eb1bd19b7484ab_JaffaCakes118

Files

a639fbdc380e72c220eb1bd19b7484ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

090aeff511abe0a2cd60d87954ca600f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord100
ord617

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ