1581d0783fdd00bd0d75b3729db6dcb0_JaffaCakes118 | Triage

Sharing

General

Target

1581d0783fdd00bd0d75b3729db6dcb0_JaffaCakes118
Size

43KB
MD5

1581d0783fdd00bd0d75b3729db6dcb0
SHA1

8d6add23d4b0911abd4491bb7d363e7a09ed6add
SHA256

1624423ff04ac98f2cdbc56317226c03d54ed944cbe2e60225b1e0947b6ae66e
SHA512

c8ae91601da867b6846f675d85875c049ec784e696c60c9e356b56852f9571c97c35e1b256eb613458fff723dfabc72294b16727f49d39aee0a280db67a49158
SSDEEP

768:DhyQcJ+Lx5ioZqqSPoFjoTCA2fRoSPRzNCPw7tor45URK61VpHmSn9Fq:D8Qcgx3qhPomG5B9gPw7v5QKeV4Sne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1581d0783fdd00bd0d75b3729db6dcb0_JaffaCakes118

Files

1581d0783fdd00bd0d75b3729db6dcb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85136c9834d453dc6aa3a0f5d46b21f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
MethCallEngine
ord663
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord541

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ