15c874c0f92c845193085ef131f71350_JaffaCakes118 | Triage

Sharing

General

Target

15c874c0f92c845193085ef131f71350_JaffaCakes118
Size

48KB
MD5

15c874c0f92c845193085ef131f71350
SHA1

a7d58c5c52250c63e9a36bcd219c6b7f59eb5cd5
SHA256

09afceb9b2008c2fdb38c8d15f8673e73a6b3ab0099774de00b3fe5eb4a18436
SHA512

d306f26158c8d7b607266fa18e68b8577baefcb445c7337cbe87b2a9ea29a42b300028ed666d4755be5fe78abfa179002c62ece917c4602f189eef29c08e11b6
SSDEEP

768:jYEJbd6heGI5eubtgTVH7NHaurxmWXOQfwoObuPb77e0:jYE9J5pbml5lXAoO+H79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c874c0f92c845193085ef131f71350_JaffaCakes118

Files

15c874c0f92c845193085ef131f71350_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcd32fd1eefc3c1f5bcc67f2c3a0aa86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ