a832b4141fa98a32534bc0e6ace90b58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a832b4141fa98a32534bc0e6ace90b58_JaffaCakes118
Size

112KB
MD5

a832b4141fa98a32534bc0e6ace90b58
SHA1

fcb21be0466ad04ead33fc3e95bdaaa079489791
SHA256

64955327001a11e874d42d89ab7000e5259b12a935bfce921c78295a35c5ba0f
SHA512

01bdc7b6a966d2108e74f823d5a5cea29e2ff3aceb48b299b2c90be9829bd5b5bb1fb2b3a66984adf2b5f29a3932c08915687f6a381bca6da7498a91b5cc2bf4
SSDEEP

3072:2r1Xx9FiSAHuN8VTSx2td4hvltjPnsVEZryIkzmQ0MsDiYNmPV5fOh2PjPsPeP92:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a832b4141fa98a32534bc0e6ace90b58_JaffaCakes118

Files

a832b4141fa98a32534bc0e6ace90b58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb08c41536c4d6033f08a25c3a2b8a58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord100
ord616

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ