02109849c52bb206e79c0fb049de4c8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02109849c52bb206e79c0fb049de4c8c_JaffaCakes118
Size

28KB
MD5

02109849c52bb206e79c0fb049de4c8c
SHA1

1dc4093875d1253bf9ff188d8ae734273f05d8e7
SHA256

b0f5a209e1639db0b65d7a60b535024d1524dd68a0591f34d98bffecca319787
SHA512

b76d82491f6d74557536af82c92d1bc7a9c40d45f07c65b9430a13d5bacc860a8bbc790daba8cfd7c3f2f32874bf90dd69074365f8255dd13290c6ba6090391c
SSDEEP

192:2qk+3ZYAsW4C8dPraRiL2Ko3fM1cc94u6NFFaecTJLlE+5cBdJ2/AE/21cc94ut:7pYA6PdqiL2KoPiGHFFQJLlEK/r/0GI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02109849c52bb206e79c0fb049de4c8c_JaffaCakes118

Files

02109849c52bb206e79c0fb049de4c8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb78b416ffda8753f824427c532e3fbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ