0184124edeeb9fa161807de25b4a5bdc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0184124edeeb9fa161807de25b4a5bdc_JaffaCakes118
Size

24KB
MD5

0184124edeeb9fa161807de25b4a5bdc
SHA1

0737f59ecdb51500be830fe73fe69d3e1644d7ff
SHA256

b9ffad15ef6e6219b244e3a9ae74626b14c03bb9ad8a5fd4446bce590b9fe0ba
SHA512

1046dc3d61b9160cf84503270ad0bb0fbe68682bcc6007790b9bdc3b3aec03d342558e82ae7a9d498c66e8ba5f04a3d9ccb36b1f2531919039bdf166ebf592b9
SSDEEP

384:UiJK/lldy6Y41FYsJ84H5y1HDgd5OogHt0F:U+QZY41FY2p5aUuy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0184124edeeb9fa161807de25b4a5bdc_JaffaCakes118

Files

0184124edeeb9fa161807de25b4a5bdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4af22468a0726e72a3433e7241c4c3db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord583
MethCallEngine
ord516
ord554
ord664
ord592
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord571
ord100
ord687
ord689
ord610
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ