a7b7ac28d97d92c57462f6d2df791dac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7b7ac28d97d92c57462f6d2df791dac_JaffaCakes118
Size

488KB
MD5

a7b7ac28d97d92c57462f6d2df791dac
SHA1

e2bf4543ad574d31f4c9a168d8c66eb6291886d4
SHA256

2abaeeb9939759090ad35b5363b1de27918912402cd32f69481cac8076b7d526
SHA512

7f1887ddfd2758f1b30fbbf2fec486d20c75eeb4b547fe0758346934a6638c610fffb9350e3516b15cc2c868a1dfa3ce707518c0bbb5804ef61d1cff609d4693
SSDEEP

12288:r9eSFUrgvyE2a7LHEpeKWBYV5vNxBidVlZ:r9ZFjqE3PJKzTBcV7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7b7ac28d97d92c57462f6d2df791dac_JaffaCakes118

Files

a7b7ac28d97d92c57462f6d2df791dac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ