02a4c9f1fdf8bc907c4959737451eca3_JaffaCakes118 | Triage

Sharing

General

Target

02a4c9f1fdf8bc907c4959737451eca3_JaffaCakes118
Size

145KB
MD5

02a4c9f1fdf8bc907c4959737451eca3
SHA1

016382920a88f809bb1406a6da7914b00e5ba6a3
SHA256

7110a908fcf93947d3f1c018fc104bcadb2b4c31756626e90bcd7f1273b42112
SHA512

f3486e1bedf78f8eec971107d69338c8782830e8b411445e281f3362289d6c6002c7577ac9d2fae33689bf73cbbda00eac0c672e605db7207261feec44eab2d0
SSDEEP

3072:mTl6zYJPQGcF9j6qRP8lS+jBsK1j0Z9drseClmhy0p/:MX1aRP8s++xxsVshrp/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a4c9f1fdf8bc907c4959737451eca3_JaffaCakes118

Files

02a4c9f1fdf8bc907c4959737451eca3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96c41bda31b47bb1a43ae94613ec2edb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord586
MethCallEngine
ord518
ord519
ord553
ord660
ord593
ord598
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord570
ord648
ord578
ord100
ord610
ord616
ord617
ord619
ord542
ord545
ord548
ord581

Sections

.data
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE