116e23a899982a421b61b9e71eaf94b0_JaffaCakes118 | Triage

Sharing

General

Target

116e23a899982a421b61b9e71eaf94b0_JaffaCakes118
Size

102KB
MD5

116e23a899982a421b61b9e71eaf94b0
SHA1

acecd7da0e02769de1ef684480a2242b1d49e246
SHA256

e03b10f605642ad936d45ed75537f9c2db7bbca24a70af1b3c9efcb19bcfe6dc
SHA512

904310e5a43d451feaf981a80fb6637a1a0602eeb56cf4fd3f028d26a745243d325417c7181c4901b57ae9d9e2eaaa6daf1dea396830794b34d9a0668a81c96e
SSDEEP

1536:miR6qxbWZvSELxePaM7qfrVt7oU/ZOvRFUxaVhwOAeXLUapgJB54IWRVHg2ZEO6H:vR6mbYM8Vp0gxaItebUaiRHW/HJTfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116e23a899982a421b61b9e71eaf94b0_JaffaCakes118

Files

116e23a899982a421b61b9e71eaf94b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffb8b5557e3f185f3a42cfdd06ccf23a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord666
ord595
ord520
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord617

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ