a94186b4c38479c74f523d1200042768_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a94186b4c38479c74f523d1200042768_JaffaCakes118
Size

100KB
MD5

a94186b4c38479c74f523d1200042768
SHA1

4eeada43c4f353956c2da1584e1879d25d18c84e
SHA256

c3d463b6d61bf6c768ece650d1c72fbd370e7c7f2b1f29697a57936efdf8a461
SHA512

cf2fc402cffa491273127defea0eb0d0a15d0b7258f0c3630cea4d9255a7c3e01022405a1c7bf7abe491e16a81cda81dec72f41ebd37b3b4ab09e39e56680b88
SSDEEP

1536:KTZtAvYEtxN2OHPR3hvn3QugPo0MYzT8T1:WfAAkD2Op3V3GPo0MYzT8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a94186b4c38479c74f523d1200042768_JaffaCakes118

Files

a94186b4c38479c74f523d1200042768_JaffaCakes118
.exe windows:4 windows x86 arch:x86

928f57622014eab53d5dcb80b21c89fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord537
ord100
ord616
ord581

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ