27295d1f9baadeb617c6df3fdc17c30b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27295d1f9baadeb617c6df3fdc17c30b_JaffaCakes118
Size

232KB
MD5

27295d1f9baadeb617c6df3fdc17c30b
SHA1

a3259e41c0f289975efdc1c17a2c888a2bc00679
SHA256

b4f4c0440c4e74205c4dfdb47ec69a20cb229525c0f74a063d2913acf3e7ae62
SHA512

41ee0a0f69b87dc4cb927b59501a0128f1b1daecdc9ca04648c9d75c067477788e9b2461fb1e3e51643e434ff4dfdc56390ceb5a10308cb06f84fbe7baaa2252
SSDEEP

6144:52JR6jBaplmtyCrAotVvp+/cWD0QBZeP2ljm:wJwd9y4JtVvp+EdOeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27295d1f9baadeb617c6df3fdc17c30b_JaffaCakes118

Files

27295d1f9baadeb617c6df3fdc17c30b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

852b6112fe25e123ee41640bc5110ef3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord555
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord685
ord100
ord617

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ