a935c48b0f738ff507af73b652088825_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a935c48b0f738ff507af73b652088825_JaffaCakes118
Size

128KB
MD5

a935c48b0f738ff507af73b652088825
SHA1

700c3b33f6611a0bbbcb6b6fe550162f147190b3
SHA256

36c91a9de2f7844c0a2dd219e48f49c74f3e7a8b13ddf2bf574f9d7ecb95f5d4
SHA512

97bf8ac32cb25388d03540e4f4cc2b79a26689a6978bdb99f551c08f4b6d313a00a17b8e808004214ee72d4adc1a24c87b0cb6337dec35daa12d48073f006709
SSDEEP

3072:XEkLZaH+kCp1RCaSCF/6UMiySQYPfrXvuq:bfL1RCaSC0eXvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a935c48b0f738ff507af73b652088825_JaffaCakes118

Files

a935c48b0f738ff507af73b652088825_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90581725c9c7e51b0b8ed29186a95b5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord520
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord645
ord100
ord689
ord617
ord619

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ