11a3a22578b1f24c6876f305f771b3a9_JaffaCakes118 | Triage

Sharing

General

Target

11a3a22578b1f24c6876f305f771b3a9_JaffaCakes118
Size

120KB
MD5

11a3a22578b1f24c6876f305f771b3a9
SHA1

29ed636b6c95f820c61e411daa4e47ba4c0cbc90
SHA256

ac254f292f6408f3966537fb4060e53a8c0170e9c1189efba4ca52656208cb64
SHA512

30a847d7f1dcd1506e69cc77b056167522497e751e03eb51dc4a4f2c68b8a9e2079d98a1a834094730b40c7c78cc5eb3281b19715bf230a5136fc2d91c732514
SSDEEP

1536:Y2hA2mAK0nh2qeCk9EHJPVsXURyDvMO1Ra+3ZucQUBaYoEqaaoMQj5/9X9DMeLUX:YsZe9iw8yfk+3ZucQUB/p9KVpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11a3a22578b1f24c6876f305f771b3a9_JaffaCakes118

Files

11a3a22578b1f24c6876f305f771b3a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cc31f495dc09dc78c4df96292dc9476

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord187
MethCallEngine
ord555
ord557
ord595
ord596
ord598
ord705
ord307
ord522
ord709
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord571
ord573
ord100
ord617
ord619

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ