b916cc28c0a6611c4f81f5d62e6b2420_JaffaCakes118 | Triage

Sharing

General

Target

b916cc28c0a6611c4f81f5d62e6b2420_JaffaCakes118
Size

24KB
MD5

b916cc28c0a6611c4f81f5d62e6b2420
SHA1

ab7ac9067912ad85f1faa71fade7e89a3866e04d
SHA256

2623be3ba0a6f268034d42b592ae633475eadfcf36f5f8334c29c9edf696c3a3
SHA512

c6286b469ff24803a23691a3afefcc4ddff235771d3595d60c50e06c8396dde25b3f1fefa3d122d9389424da11719333e0e6b36f0f9a3b00f3a9157446eaa268
SSDEEP

192:zSL4DYGK9SxaXmSBGlHxoOuIq9g87bFJcSD03jADFltliQ/Sa+Cj:zS9Ww88rK87bLGKj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b916cc28c0a6611c4f81f5d62e6b2420_JaffaCakes118

Files

b916cc28c0a6611c4f81f5d62e6b2420_JaffaCakes118
.exe windows:4 windows x86 arch:x86

088d3f1ebee7129b31a03bf107c0bb29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord613
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ