c04327f9cf03c74f934402fca82fc926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c04327f9cf03c74f934402fca82fc926_JaffaCakes118
Size

28KB
MD5

c04327f9cf03c74f934402fca82fc926
SHA1

d9c2a346e6d743a92e4403ebc445e19f3b7598ed
SHA256

5828ad6f7851af7bf118432b296dd80e85853d70b6bbf5c1f94be233664161bc
SHA512

42d224802e16f4af566781ea0c79f3823473c3027eb926d6c31af903e16e0b7c2dac1e0f48b5af354b6cfc1373224b3d26b70dac49ef839cd2a8db78597bd0e8
SSDEEP

384:KYWh/wOzrA0yKjAPcXtfBDGqJLVavTmBdhFLr4h6/GPlUuYQkYI1Y5eespBRO:VWh/wE1APBqJ5Bdhhr4h66UuYQky1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c04327f9cf03c74f934402fca82fc926_JaffaCakes118

Files

c04327f9cf03c74f934402fca82fc926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5df410da859a961ad0750e43e2287659

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord593
ord598
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ