c194af97627e4308c1ff08d24ca924ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c194af97627e4308c1ff08d24ca924ed_JaffaCakes118
Size

36KB
MD5

c194af97627e4308c1ff08d24ca924ed
SHA1

b625a82970201d021f591a49eae3e27a8fca394e
SHA256

c00dab580c9af5d9ba16a5816ae63772161bbcb2c45c9c53161512022157eb48
SHA512

cbdd025d04718a3a3e7ce6dd3e358cb10b74a16bbb4d3c2b698976bccdd19d32526ade3c2d06c1c5e7c8ae4f4529a2fc6575d3aff485382f728989ad425ee615
SSDEEP

384:BLdY/XuDdFY3d924GiGu/f0IvALCprqWmzq5x7CLtM0G:zY/4dFY3X24eu/fpr31CJy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c194af97627e4308c1ff08d24ca924ed_JaffaCakes118

Files

c194af97627e4308c1ff08d24ca924ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

460054704b79cb66b4e52190c9d72cd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord516
ord595
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord616
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ