be3664cd9cac88905829481709f7931e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be3664cd9cac88905829481709f7931e_JaffaCakes118
Size

48KB
MD5

be3664cd9cac88905829481709f7931e
SHA1

13aff451a68d2d14d155581ddc95044f69ea2620
SHA256

099cae2bdb450014f7b5e029be6721be66f68c4418d19ae0ff169504c134bbf5
SHA512

8e3aea6f921378825c1c915ce04f226cfb6df85e228029ffa115de25cd58cc302f3500697c5ede30b5f2a752c3dd47bf03f3f75236f77b12b93f908032ff6002
SSDEEP

768:x+8QQx3aGAmk4CQuSTzH70KFWBt7QSTDuW9qrQ:0OonuSPuW9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be3664cd9cac88905829481709f7931e_JaffaCakes118

Files

be3664cd9cac88905829481709f7931e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a8d42ec0350632a9acea199d20deedd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord537
ord572
ord573
ord681
ord100
ord612
ord617
ord619
ord547
ord581

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ