295b9363a35ea19e8ee420fd69a53349_JaffaCakes118 | Triage

Sharing

General

Target

295b9363a35ea19e8ee420fd69a53349_JaffaCakes118
Size

12KB
MD5

295b9363a35ea19e8ee420fd69a53349
SHA1

5c604d2a3ab0df6905ef2632bb8b5b070fa62d26
SHA256

2fceddcd29b10f1b51cbc51f5477b2e48de4372f0ba1799712ea97389f2d7a88
SHA512

60e0460d96f084cfda6ea45fca1fd64907e00bd634a31c63c27a404561078d8c07a6b36c571e370b123e499c86f2cd8e621772eb850516e169a434cf672010b3
SSDEEP

48:yg9DdrLpAuFOgdT+3e80wxUbCPNHg2jbvhAQyiWhYVpKp6Vv6BRZ2FwuEfK2:d5pBFtdTvCt3vOiLVpKpo6B+Ei2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295b9363a35ea19e8ee420fd69a53349_JaffaCakes118

Files

295b9363a35ea19e8ee420fd69a53349_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7c16e8e5dd83b9746013f601d12ec0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord617

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ