df37d7496177f6712c1e035987269703_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df37d7496177f6712c1e035987269703_JaffaCakes118
Size

336KB
MD5

df37d7496177f6712c1e035987269703
SHA1

772821d4df19e7eff19739b03255ffb172b8fa67
SHA256

88cec4b56e38b5dc6f71148bb19cbe9a10f059bca951a8aad56938af81aebd2a
SHA512

43583e851466c183e182dde05f182b00c26e1d3b3a5f95b1a03918b194b1c1759bf9e19101222eeeb86ce7f9e23d7b93739ebfa70ca23cb68b524dc851808067
SSDEEP

3072:Vd/TE+7n9BBBBBBBBBBBXCwhhi1XWodaRydVjbKH5Ox8Ve62UI+ZArzgC64B+MEG:Pi0nodxDjbwVe6ZyzgCdKKA53eV/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df37d7496177f6712c1e035987269703_JaffaCakes118

Files

df37d7496177f6712c1e035987269703_JaffaCakes118
.exe windows:4 windows x86 arch:x86

358f47ffbc0b82b002ffec7c50229891

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord100

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ