dbd361e48e6ceaacfb6d69e3bb9f312b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbd361e48e6ceaacfb6d69e3bb9f312b_JaffaCakes118
Size

316KB
MD5

dbd361e48e6ceaacfb6d69e3bb9f312b
SHA1

7c1ee76a2237f8280ef647d732368bf981b4694e
SHA256

25bd2f93aea0b8e6b549baea5ee566c05dd2e5f5cbcd1391e7cfe9b5c722d7fa
SHA512

fc500352a779dd12b4b189b8cd87635570140b2b3caf9a1a45e6f2e4d816a3f3609f25d59b305e222f5f3f335e7c4fc6c9c0375f0ae0120dd4085f0bb3da7f1b
SSDEEP

1536:wEO2pZeMr8pZeMr4rhcA91tJ9qvUhOjY1CnMMMZmbQtafER+TIlyX8JWLAdKP0BG:wqpZf8pZfk1+j5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbd361e48e6ceaacfb6d69e3bb9f312b_JaffaCakes118

Files

dbd361e48e6ceaacfb6d69e3bb9f312b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec8cb33d5fcd854d6c8894c2d64ccea3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ