135e43a9b242ea11dbb8323433e55538_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

135e43a9b242ea11dbb8323433e55538_JaffaCakes118
Size

44KB
MD5

135e43a9b242ea11dbb8323433e55538
SHA1

b01bb41ad556c7fa8d28136a10cfd4e5608a956b
SHA256

b53435c54599718a177224dad62a75380ff3d8db050913e8cc230e3011d2ff16
SHA512

e87bef06b9897213728ba91a5fc7c6fb0ac65f0934bb309d18692a224ac1c3c49cb9e73191218fcfd277976a49a8f95998a493a4e2dd4a5f0ad52ab538a029f1
SSDEEP

768:5dAIHkzeu/y4xaAsqawDCXFM1AYE/D9yfdDk3BtEcrsSj3v:5tHAX/XLawiMo9yVRG3v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
135e43a9b242ea11dbb8323433e55538_JaffaCakes118

Files

135e43a9b242ea11dbb8323433e55538_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3de1dc0be559435bb210f46d39e92649

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ