be35e02ddd2f6bde0e1be71bb48171e7_JaffaCakes118 | Triage

Sharing

General

Target

be35e02ddd2f6bde0e1be71bb48171e7_JaffaCakes118
Size

36KB
MD5

be35e02ddd2f6bde0e1be71bb48171e7
SHA1

99529dcdb1c49bbb766d5da5abf1dba361aa43c6
SHA256

e5b0d36952b1e24a5809bfde784257780770d9a287a7c45c9231c82957065df5
SHA512

0db211292f0c8ab3b2e93b5570f083b840fb368c375cf0621dbd09417b96f6a48e2171c2aaaa27bcc1281d468d2d0f0b02e9977b6d430c330f0afb79ac1c9790
SSDEEP

384:n+8eEwy5Zx1KyPQmT5MP+FgG5z67gmz5pFKrYutNdpQSIj9BveNqlj+/:neal/PQmT5MP+KG5z695pFKrYut+a2+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be35e02ddd2f6bde0e1be71bb48171e7_JaffaCakes118

Files

be35e02ddd2f6bde0e1be71bb48171e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f7791d50c988ead89c62d902b20da84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ