c28cb8f4bd90b9ef7b223095df60de20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c28cb8f4bd90b9ef7b223095df60de20_JaffaCakes118
Size

24KB
MD5

c28cb8f4bd90b9ef7b223095df60de20
SHA1

11bcfe4a88834ec9e5e9f74fc157ddc366d5cbd0
SHA256

8638dc832378e713e44262de8994a3ec6c019dfa1ee25215c97b02a502cde8b7
SHA512

2afb631b7c262b0e1c42fcda5d4cc03f61aa94510db22cb5d1c7b18caa6ad0cc762eb17b3fabc88450ec10872083506715546c4051e25a86405885b7ed0b631a
SSDEEP

192:3CMX5UYPjwIJ9MAZhkiFf4Va/HB/K8iI+8EcU:vXhjwCT+KQVaIM+nZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c28cb8f4bd90b9ef7b223095df60de20_JaffaCakes118

Files

c28cb8f4bd90b9ef7b223095df60de20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96c1b664cfdcaa4677082eeb79bd3dae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord516
ord669
ord592
ord300
ord302
ord303
ord598
ord306
ord308
ord309
ord709
ord631
ord525
EVENT_SINK_AddRef
ord560
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord531
ProcCallEngine
ord537
ord570
ord648
ord685
ord100
ord616
ord618

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ