287bc7bafca1f29788408d388c6d04e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

287bc7bafca1f29788408d388c6d04e6_JaffaCakes118
Size

24KB
MD5

287bc7bafca1f29788408d388c6d04e6
SHA1

d13903fbfbfa5b63ae473d921f67761b6c15fb03
SHA256

b1547b9cb4390560ea5eca791e6879e3e4cbd82c2dfa0e6ee282170f3b696211
SHA512

698c729c18604cc137333d6f0c2c0b13b86bc40e04d71e66a10cfe91e58cf66b9342111b420b94aa9fe446e38c41c981a1c377cd5e2f3cbb0c957a91939179ac
SSDEEP

384:JKVeXwu7L5874vyHDXtmhQyIVuvF0hFvhKUcZEdrpP6rd8eG:JyeAu7t1sXtWhd0hFvhKUcZEdVird8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
287bc7bafca1f29788408d388c6d04e6_JaffaCakes118

Files

287bc7bafca1f29788408d388c6d04e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9f15f4aadefa41235fbf0faf5612387

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord695
ord696
ord698
MethCallEngine
ord522
ord630
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord648
ord100
ord689
ord610
ord614
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ