de1e862f6defc1ad63fa84aa721c3113_JaffaCakes118 | Triage

Sharing

General

Target

de1e862f6defc1ad63fa84aa721c3113_JaffaCakes118
Size

87KB
MD5

de1e862f6defc1ad63fa84aa721c3113
SHA1

1ddd7bd14b2af1480610811b91709c1b70a91312
SHA256

c76a236b840deb193cc5ec7d2ab4a8da9168c29a5c9d629b18ff3c3b9c07e219
SHA512

375542d05c018225df694879a275f63aad43ad2ffd0f54d920c94e4c9c1a32cf3b88df75c93991cf1cacc620bf661ee36ead9d2c8d947318130ff31b9a390c21
SSDEEP

1536:LLQNZ3wZxmV8JoBYf4nnpLZQ54/6sbu1SCZU:agyWJlf4nnFZQ5K6sbu1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1e862f6defc1ad63fa84aa721c3113_JaffaCakes118

Files

de1e862f6defc1ad63fa84aa721c3113_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0f1a5047094e9fb9758fe6107d71830

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord598
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord536
ord644
ord537
ord645
ord570
ord572
ord573
ord681
ord685
ord100
ord618
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ