dece99161068d3a021af15ec4fcc38a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dece99161068d3a021af15ec4fcc38a8_JaffaCakes118
Size

24KB
MD5

dece99161068d3a021af15ec4fcc38a8
SHA1

bbbbcc43171181d892254571d6dc9562df71fe5d
SHA256

c68856f5f9b0eec5efd9af6cebee832d07f5af0f3b1cbbbae3df81efd3bb46f5
SHA512

1c15081ae300025953131eaa56f5e9b2e3326ec51a73348df50bb4c16100f77421578b5919b705e0235ebf2f1d11742d5f25e8dadbdb38b915e11c3fce5562a9
SSDEEP

192:rEsz+4I1bKBrH575qIAQKMG325HARnAl5pev5G3FXQd5Gg6t+0nPk6oH43O:AKfBrHt5qIAe5HMAlPev5eFKQd3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dece99161068d3a021af15ec4fcc38a8_JaffaCakes118

Files

dece99161068d3a021af15ec4fcc38a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

906a0ab6e090169e652c9775379fe6ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ