a753abedcabcd216694df151e85cf81b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a753abedcabcd216694df151e85cf81b_JaffaCakes118
Size

272KB
MD5

a753abedcabcd216694df151e85cf81b
SHA1

88821f1cc74c08534050e4027844a8438e940910
SHA256

1dc2179cec0a5e2791f84a30ab9965fe43f412eebad2354406a3f7a7e3691e30
SHA512

0ae09c832fc9938430a628f39840ed90d8696a18b1f7ca49305db7a66af05af22ae0614b80f567b5fe8e501069214b695f231498f8ba6f6d8391b066eee1a2d0
SSDEEP

3072:QSnw4ty2ye9OtlXEBiUrfG01Y5iSnw4ty2yn:QA57EMXzG0HA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a753abedcabcd216694df151e85cf81b_JaffaCakes118

Files

a753abedcabcd216694df151e85cf81b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b5867a5e576e58be5dec7ce22da5943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord665
ord593
ord594
ord595
ord598
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord681
ord685
ord100
ord612
ord616
ord581

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ