d028ea19cfcf6d7c158b2c6a6003abae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d028ea19cfcf6d7c158b2c6a6003abae_JaffaCakes118
Size

152KB
MD5

d028ea19cfcf6d7c158b2c6a6003abae
SHA1

d8909d6a373ff62848dec723a5f3dd7b3e3de409
SHA256

e858f837aac7cbbdf189b587a83ba211b99c01e48b3f4dff50458393bbb5b1aa
SHA512

53f3516260b3b3511acd31f728eff0af834c6eeb4329f69b18f02e485c2cb3125381e741d73807fe6a9adc5d88f01c3d5332a255fefbd9ee440eed381ec8ce75
SSDEEP

3072:4q+Jgab0Nhch6j1dFo6G5IKWBOhS6N8dF4:0Jg3N/1ojQMgGWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d028ea19cfcf6d7c158b2c6a6003abae_JaffaCakes118

Files

d028ea19cfcf6d7c158b2c6a6003abae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e22de6b9591102572838cf068548e71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord558
ord666
ord669
ord595
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord573
ord681
ord576
ord685
ord100
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ