033d72d5ad94b29d994cfe777d4f803e_JaffaCakes118 | Triage

Sharing

General

Target

033d72d5ad94b29d994cfe777d4f803e_JaffaCakes118
Size

76KB
MD5

033d72d5ad94b29d994cfe777d4f803e
SHA1

7749d400b3ae37d3f2974b926994b27d330d1261
SHA256

019c35e80e431089f77a065d0a498062331dba06c6692bc4c061d62635e1ad43
SHA512

a6b6d932b653a6725fc4849d7dffc707d9b152e030f7a3dc4e5ee6d5ccd8bfc826952635b935b33ca1d48b94f7ddf0b062d4eb40485ba1d876c9316054d8e6ae
SSDEEP

768:Mga4Bhl/KPfghpMSgFdhVmvdg2X4Yt1NEDIefZsD:MCfNafW1gxVHmPt1y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
033d72d5ad94b29d994cfe777d4f803e_JaffaCakes118

Files

033d72d5ad94b29d994cfe777d4f803e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2fb875db3fe21466ee586508d74c8b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ