036476c032c9e0efc594464c7b3cff88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

036476c032c9e0efc594464c7b3cff88_JaffaCakes118
Size

28KB
MD5

036476c032c9e0efc594464c7b3cff88
SHA1

1605f696e90e54cd536c661a06ff49a96fc5b93d
SHA256

deea12aca64c55e36bd8b35edc66cb25d9fbbb0d647f3216d40dc99026ef852c
SHA512

1652c28889d021984c073201f8bff488f7b4f2c688547820c92d41360cfa7bc3ce1a9b9c0a03fb883de35492841cba903086df2b5c740991141e4d442019dfa0
SSDEEP

384:kiMDaK6oyu1/beFEA5B8M573SGdupiMmvj+WWpThQgn4YYlN+Q3cW3PW8:VVoRSEA5BljbPgnruxu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
036476c032c9e0efc594464c7b3cff88_JaffaCakes118

Files

036476c032c9e0efc594464c7b3cff88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9df1648d6074932bf7d228457f5ab0ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord597
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord573
ord578
ord100
ord689
ord610
ord616

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ