dec274d94215690fc2ab56acc152cd4b_JaffaCakes118 | Triage

Sharing

General

Target

dec274d94215690fc2ab56acc152cd4b_JaffaCakes118
Size

20KB
MD5

dec274d94215690fc2ab56acc152cd4b
SHA1

2fbaf6a953637c1cd8a0324d1e15cca462200dec
SHA256

7ad13da1ee585864d83644977c55d0a242a61eb3afb181a340b1d01415fe1490
SHA512

1b688c81d4a60cb18958c5ea95d619e33718906212b3ba7a3050670b8130517e5ac6b7ad6c5816ab853f4211a5122465d6ae99588a89c2000581216e4dcd5fb8
SSDEEP

192:3FaIif9O7Wgbqs7ey1cFQyFvenaHE5XpwQBDHEo:3wnVEBrUqaH+pweDko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dec274d94215690fc2ab56acc152cd4b_JaffaCakes118

Files

dec274d94215690fc2ab56acc152cd4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7afd26dfc792b6d694f63ac01598d1c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord586
ord696
MethCallEngine
ord516
ord520
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord537
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ