d4dede4afe889a211cfa2b8eb4720378_JaffaCakes118 | Triage

Sharing

General

Target

d4dede4afe889a211cfa2b8eb4720378_JaffaCakes118
Size

324KB
MD5

d4dede4afe889a211cfa2b8eb4720378
SHA1

30162511f25a21d914c12a4d82575f122704fa8d
SHA256

28b52560a2947c279df42091f19f3da3a179ca78119177a27b87f9b74fbfa40b
SHA512

5d2e63b7081dbb1950b9237873db97218b3f50621d173311f358cd2595ba6b5d3c837d02eaac17522b903913b69bdf2b9abd2836ad31846e98ed84e1b3220767
SSDEEP

768:Kj0RXuGlBLdxHZMwwU+yUoiqC84+k0nQ64uMobAymwnXScCZ5KTDiO91PK1G71Er:zl1IEQEMGAQXiZcd91MlrXJGA6QE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4dede4afe889a211cfa2b8eb4720378_JaffaCakes118

Files

d4dede4afe889a211cfa2b8eb4720378_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8af501df7efc2046d59121b5e300e650

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord616
ord581

Sections

.text
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ