163625f700cde37f1f2c4adcc62e098b_JaffaCakes118 | Triage

Sharing

General

Target

163625f700cde37f1f2c4adcc62e098b_JaffaCakes118
Size

32KB
MD5

163625f700cde37f1f2c4adcc62e098b
SHA1

78f404ccdde9e3760db45b98f7c95dc1821702f1
SHA256

cdc3c276c800049d0e8c9a4fac3e7f1959e4a02e6e9e5e728cf8489463167909
SHA512

e2b445ea80b634efe67b07ef9e20464e7dc4becabee4cf6a0ae98dd6dbb6e70565539cbff5a8bd9ad895440ed1877a2795fb89a12dc5e4a0886bfe145c8e975f
SSDEEP

384:Y/y7DamkizX6z0qWgfynEFF6DeYDKGHgo4ueY2BYFwJkXdK+SbQ4:f7JZC0Pgfdn6aYDKGHgbr+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
163625f700cde37f1f2c4adcc62e098b_JaffaCakes118

Files

163625f700cde37f1f2c4adcc62e098b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6f26ea58a8cc104cd74e9ca7fd60442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord573
ord578
ord100
ord613
ord616
ord618

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ