da93b45644b6b37e02acd7ccb1e8a329_JaffaCakes118 | Triage

Sharing

General

Target

da93b45644b6b37e02acd7ccb1e8a329_JaffaCakes118
Size

1.2MB
MD5

da93b45644b6b37e02acd7ccb1e8a329
SHA1

a22a018a69daddd6d523c521c30f65ca0e0e9aaa
SHA256

503cd45db5cd3b0e620101cc5de34c72763782fcff2929b205b1c29724c5860c
SHA512

65e908a5fe7c81b41918d71661aa58e77416fd55a3bd66b99c7bbe2fa8fb8d8418ea4b971ddc11eab0f79b69c1e7e7bbfa43431aafa31a3a632d6e28adb33e0a
SSDEEP

3072:sstgSIkVtohAbuPdN8dsAYjZjfD4wP6EnA8FJWUb76oNASeaqXiHu8yuiL/aR+co:sjgN66lJF37XIyhb1KAHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da93b45644b6b37e02acd7ccb1e8a329_JaffaCakes118

Files

da93b45644b6b37e02acd7ccb1e8a329_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ce216327d13f46ded8d41108088fa75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord597
ord599
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ