da2817dacf6ed210774651698ff604a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da2817dacf6ed210774651698ff604a9_JaffaCakes118
Size

36KB
MD5

da2817dacf6ed210774651698ff604a9
SHA1

906d304c83dba5402eac58c831e88c34ee960dd8
SHA256

94cf4c432cd5b6aae089e4fa67c052142b0fdc989f46171a428b720ef59062fd
SHA512

b586c503d879b0243199aa04a666a62cd9793f144f008a34c2c6671c1454df1b24fbda46d7c911318b58776eb89ac923bd02016ce96b18feeb695b2d299ce2f3
SSDEEP

768:CUJk51Ll6VHf3LTvFpEl2DCisPHVpHwjLIU:Ra51LYL5BKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da2817dacf6ed210774651698ff604a9_JaffaCakes118

Files

da2817dacf6ed210774651698ff604a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01e7dee5a41f88aced98db2964d6fab3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ