b25dee615bc7a7d3d4b6add2aba34aeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b25dee615bc7a7d3d4b6add2aba34aeb_JaffaCakes118
Size

196KB
MD5

b25dee615bc7a7d3d4b6add2aba34aeb
SHA1

fde5bf8accc7d146c2840e7ad2bb741a5be8f466
SHA256

40b1aaf8b3c1f64414cc9887148bb2f6666a4b02a1237895936966384475ed01
SHA512

f71e71199d39be917999fa24431ad72f8b840f6328fba8b09ad7e94de86c9bb6d270353ffb218339e5b111cca480dc4cea0a02833cc006b04901c9e371922635
SSDEEP

3072:MWLESS6+LW9TcG98l/GQgjvhcxZI1VXrK47Ki7/aGjUNMAn4NNALvzg5G5X/w:MWLZHTI/GZLhcve1ZdzaSm1j0AP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b25dee615bc7a7d3d4b6add2aba34aeb_JaffaCakes118

Files

b25dee615bc7a7d3d4b6add2aba34aeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b2f53d6c24fd67fa0f29cb2da39eec1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
ord585
ord587
MethCallEngine
ord516
ord666
ord593
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord575
ord100
ord617
ord581

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ