ac35d04fc2df94e007a3bde534cf9169_JaffaCakes118 | Triage

Sharing

General

Target

ac35d04fc2df94e007a3bde534cf9169_JaffaCakes118
Size

28KB
MD5

ac35d04fc2df94e007a3bde534cf9169
SHA1

0032216edd69c6abebf4f69acf7724ef8605f4bc
SHA256

f073a165bfe0502a40f8a8d31d1c01c4c4185671d65d55b6dcaa65b800062a3b
SHA512

015a23d4121d7f3849d4d161634e3a3acbb9ca70c2de201b01c01a31157082a381ec9c0446fc8aa3a24eab602fd2a1a02803cb042821453f17aa1d7feef5c09d
SSDEEP

192:dRj4qDjqQp9dLF3yopPS5CzE0cUjQlllAlJllLsRK0l4:T4qD2QJF3yoxS3yjG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac35d04fc2df94e007a3bde534cf9169_JaffaCakes118

Files

ac35d04fc2df94e007a3bde534cf9169_JaffaCakes118
.exe windows:4 windows x86 arch:x86

208d43f8915616637e3faefc22c6b398

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord685
ord578
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ