102a7b34f973efc62c949c8d2cf9dd1c_JaffaCakes118 | Triage

Sharing

General

Target

102a7b34f973efc62c949c8d2cf9dd1c_JaffaCakes118
Size

4.2MB
MD5

102a7b34f973efc62c949c8d2cf9dd1c
SHA1

c7ff3e0977eebae2a032f737aecc009259d38f05
SHA256

e896a2b43f0d4d145fea08eeb03e33c8fe71978f76981767aba4bb2c03f009d3
SHA512

e86aa8b2b4d383f3ad673ad66324be7d4529144f99db49299c95744bd248383542bc8470059ac8d6cf3aa67e692d04d2e209c651b1a5b4943a94465339ad51ea
SSDEEP

98304:pmvqyceFn8TbiqlAl0daHY7DZM2Aob77KZrcHl0hrDgusMbS6X:m/ce1Um9Gb7DmobugF0h3guPbjX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102a7b34f973efc62c949c8d2cf9dd1c_JaffaCakes118

Files

102a7b34f973efc62c949c8d2cf9dd1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6abe0508b11eef650e8eb57cbcce64a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
BASIC_CLASS_AddRef

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ