038aa00978345c4d3ecfecb65ab7d4e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

038aa00978345c4d3ecfecb65ab7d4e6_JaffaCakes118
Size

20KB
MD5

038aa00978345c4d3ecfecb65ab7d4e6
SHA1

6958ab486624d52c40412d38aa58a20c1fd5425d
SHA256

27cb121669bdcfc51103b8830881d973de81ee19d194c1da6a1b870965e67724
SHA512

b25445f27ed40a6a6e4c8565fb0ccfe1c7cc7983f6c9a119dc6858c993018f095ffd058a99680afed458e1100aeb3c9e1af38bdd0c13fb9a1b7488fa5bd04d2f
SSDEEP

192:dUgLhMQal23K365SaVQwkGwEwERcDyilbMaEK+E1NfXc+4oK1tBUg:1htE23K3DwkGxcDyk+eNfXc+4oK1t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038aa00978345c4d3ecfecb65ab7d4e6_JaffaCakes118

Files

038aa00978345c4d3ecfecb65ab7d4e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46512bea352de2effa135aea64c7e15b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord598
ord599
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord576
ord685
ord100
ord546
ord547

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ