a95154870242875b7c59aca7ce4fc0cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a95154870242875b7c59aca7ce4fc0cb_JaffaCakes118
Size

496KB
MD5

a95154870242875b7c59aca7ce4fc0cb
SHA1

14fa303a25d58193854bbaec19f1c6f1b794f6e1
SHA256

2f00e02ab68e6cb8a98b569253405b4b78a28dc331b7cbd7c0ba18e255fb9375
SHA512

4a88495c4893800b776a700a7233be5e883b941febe5cb7908d7fe7badd143d41ed74b1ccc5b400e4458d236c5e1663003246c3a7453735e7dfcb5c2e0ef9ed8
SSDEEP

6144:x2PlHseAWAHPk2+XntjZKKj2fNO2PlHseAWAHLk2+XntjZ:wPlYcHntAKj2tPlYIHnt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a95154870242875b7c59aca7ce4fc0cb_JaffaCakes118

Files

a95154870242875b7c59aca7ce4fc0cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef3d5bbc4bb9d74d08cd18582edfc951

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord593
ord594
ord595
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord572
ord573
ord681
ord578
ord685
ord100
ord581

Sections

.text
Size: 360KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ