b4af853e9d5097b2b9016743a243c6e3_JaffaCakes118 | Triage

Sharing

General

Target

b4af853e9d5097b2b9016743a243c6e3_JaffaCakes118
Size

28KB
MD5

b4af853e9d5097b2b9016743a243c6e3
SHA1

326b1ac74ff4fb044c7fa786502adc82e821e0d5
SHA256

8147e1138e6c121dfa704ab72c2032d91ad83b8060a145bc4739d4c312c111a6
SHA512

209cfdaee522db601fdf7d0438e3849864685bfbeae14ac76a8ee96d2b594f973ff8e2ab4b2d46c8db6abd7b62f537b3af825012cc44165eea50356563026551
SSDEEP

192:05IWDIkuWhLmeGpY8VsM1cc94u9qXBcswPLxE+501BBdrFhJ4M21cc94u:zaAWhaeh8CiG4qXRwPLxEJ94M0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4af853e9d5097b2b9016743a243c6e3_JaffaCakes118

Files

b4af853e9d5097b2b9016743a243c6e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ