d02b8d279d25528036348cc02d655169_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d02b8d279d25528036348cc02d655169_JaffaCakes118
Size

20KB
MD5

d02b8d279d25528036348cc02d655169
SHA1

c1b76bacdb783afce521c39c0bb591b8ab9ded92
SHA256

f1563d8629949074b527308d1d7327759dee490b94c2533e5848175f47db8caa
SHA512

096c03d2d48932463bb4c06d5cf65f89d1f4c32719d6cbe540d660c98ee932e8c1e6d875c52463448fd7fb3c9368999e016479ea889fc6aec5d24950e44f0bb2
SSDEEP

192:nllmu953K6mGBIbp7w34w7vyrAw34Qyr2w34wdjriw34wdurbw3FoouFM:lj5K4BYetQbg6gPkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d02b8d279d25528036348cc02d655169_JaffaCakes118

Files

d02b8d279d25528036348cc02d655169_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2cdce759397bbb4ad2fbd26c9ba5da7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ