09355239e948088f073eb104e23e1cd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09355239e948088f073eb104e23e1cd9_JaffaCakes118
Size

24KB
MD5

09355239e948088f073eb104e23e1cd9
SHA1

1a53996b90a945677a57108f6b36f032107b21a3
SHA256

7e61d631395a2abc257536de1fc99d834780925645c85f438f8c5f6fb8cbb411
SHA512

b9edc932d84bb9e010410518f287cdb4cf03528ce985007fad68093731842e92e641cd8d4ebbb2e197776caade99d37292625082e25a52c6dc966da3101cdaa6
SSDEEP

192:tJIvENtxX1AMQbyod16jK4XdYQGhubN96WnQCAChIFEa:LxuM+QGwB9dP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09355239e948088f073eb104e23e1cd9_JaffaCakes118

Files

09355239e948088f073eb104e23e1cd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1574e2dce682227e468a2f15da7db157

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord593
ord594
ord595
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord100
ord616
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ