028e2c31fe1a2c2c9617307481d954bf_JaffaCakes118 | Triage

Sharing

General

Target

028e2c31fe1a2c2c9617307481d954bf_JaffaCakes118
Size

68KB
MD5

028e2c31fe1a2c2c9617307481d954bf
SHA1

afc359400b50742278002e6aecd3b78ded047d2c
SHA256

e37996c6187a4dfb8bc5106e7224df519e5bcc9ff9d8df0a45ca7cad83aeee53
SHA512

45a1792131f64a8f056079abaaab7e0c9cbd6ea4c127155a2741c837f2bf85580c44e517205d411e591597d4196f40c8361b542a29c6e04653940c98a6afb6ff
SSDEEP

1536:KBBGgyj8QvFxHSNOJpNQRFqNQdvciyw6:kBGgeEOZAEw6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028e2c31fe1a2c2c9617307481d954bf_JaffaCakes118

Files

028e2c31fe1a2c2c9617307481d954bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7043642efae16cc576581e58d774283

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord691
ord187
MethCallEngine
ord515
ord660
ord553
ord595
ord301
ord598
ord520
ord307
ord522
ord709
ord524
ord526
EVENT_SINK_AddRef
ord528
ord560
DllFunctionCall
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord572
ord685
ord100
ord616
ord619
ord546

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ