d275429c468230815461cd764fe374a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d275429c468230815461cd764fe374a6_JaffaCakes118
Size

32KB
MD5

d275429c468230815461cd764fe374a6
SHA1

51a71a61691658daedc8a3ffc6c375a438eaa9cc
SHA256

519714677f87a74795edf5916f026b6108b8cba6b6f067fc1036fdb3f1a56e96
SHA512

d3623871ba3350b396dde9758055d511733ba7c848260eeeaf9a4b5f79d0a3ef0badc379aab42e5704af2931447848b10e4ae3a3aab8e31b9ee3e24d77340d5c
SSDEEP

384:JH6LeY4Q2b3EifLWwpvmqJ+/By+kcd4egPGr4rx17:JH2J4Q2b3EiiYe3/8Ydt9Ur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d275429c468230815461cd764fe374a6_JaffaCakes118

Files

d275429c468230815461cd764fe374a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e17e7d9f6372902e04e010ad1d2aa839

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord626
ord666
ord593
ord594
ord595
ord598
ord520
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord534
ProcCallEngine
ord535
ord536
ord645
ord100
ord579
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ