1281a378b8e80502ed062ea77ef3ae47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1281a378b8e80502ed062ea77ef3ae47_JaffaCakes118
Size

28KB
MD5

1281a378b8e80502ed062ea77ef3ae47
SHA1

320d20d505b3e532b7d8eac171ab36baa77e755a
SHA256

9365912f3d4b1eb558f0f6d6a9cde6b6b7660e18a6b92c598a41f3d0b9667bd8
SHA512

e2fa5bfc5bd936689be27af59c46a9a6eabb84d068018a267e35ad20ecdf219e32c07fe8e6272107a69f10fac6a2f003d4c5e0e91d1a5f6f816ec6e3e6b5621a
SSDEEP

384:kiMvaK6oyu1/beFEA5B8M573SGdupiMmvj+WWpThQgn4YYlN+Q3cW3PW8:VJoRSEA5BljbPgnruxu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1281a378b8e80502ed062ea77ef3ae47_JaffaCakes118

Files

1281a378b8e80502ed062ea77ef3ae47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9df1648d6074932bf7d228457f5ab0ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord597
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord573
ord578
ord100
ord689
ord610
ord616

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ