d29e6dbefd2be3830e18309316fbd202_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d29e6dbefd2be3830e18309316fbd202_JaffaCakes118
Size

28KB
MD5

d29e6dbefd2be3830e18309316fbd202
SHA1

ee77f01124037115feb696ff964518ce3d5cd15d
SHA256

c1e0b755387fa46a37c9d658c3f8f5920a624f1621493276c7e61f734479e0c0
SHA512

6a656c186bbf2fec2d4020c3650eaf2600bdef7e0efca2c332ecfc8902fc8509730b24c52c9de5b2dd559b699be3bbc9cf19bf3e073cef755be1c8f17ca5657f
SSDEEP

768:Z9MxLxF8ExFPFLZ3sLgDGgZnYRsmBfm1OHiO3R0N:7KD1OHiO3R0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d29e6dbefd2be3830e18309316fbd202_JaffaCakes118

Files

d29e6dbefd2be3830e18309316fbd202_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5bfdb4c23b9e9d3ee09fb46749ee711

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE