deb2510c32986bceacb346dbb381dbbd_JaffaCakes118 | Triage

Sharing

General

Target

deb2510c32986bceacb346dbb381dbbd_JaffaCakes118
Size

68KB
MD5

deb2510c32986bceacb346dbb381dbbd
SHA1

fee478e900b98af7843e49b11ca6034a6366a42c
SHA256

bb8cf7a97c3f0b74865f753f32a7ba965a51af826c9ad1060ad333b743d8e139
SHA512

e1d96a88213fdf385a24ddc3d28cd7e2a4ed2fccf329f7a81d5f19f70faf6a10d2267863477af33bba4f2c0cd3e624287a9361db4795df4345b7fd431a088662
SSDEEP

384:tiy3SuhpvUcELKY6abDs0D1H9vjlbtVo1EraTPT41KuYvKGIz7Y6GfPzYYV5KooV:tDhRRELGADHJZTzzrEPzwj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deb2510c32986bceacb346dbb381dbbd_JaffaCakes118

Files

deb2510c32986bceacb346dbb381dbbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2183f938e03e9edc0d433466a1c2e19e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord595
ord596
ord598
ord520
ord525
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord537
ord645
ord571
ord100
ord612
ord616
ord546
ord547
ord581

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ