28c1529c80cc880dd6115e1a77da925b_JaffaCakes118 | Triage

Sharing

General

Target

28c1529c80cc880dd6115e1a77da925b_JaffaCakes118
Size

310KB
MD5

28c1529c80cc880dd6115e1a77da925b
SHA1

0cc70940fd0170b8fbb44a8221a5c27185f636f4
SHA256

c992ffeb0142951a5eae7b8f1b510d3129ce421307fb260807f617588531322b
SHA512

e9d8683cb7e35b8a1a797d62e6c8a7f679bc36d96a5a472955e85ef4113251ce8a73b04af065e6f2bc4dac1db7f188d2ad74f2632cc520ed9f29aa8946751019
SSDEEP

6144:kRdWXxJrt0DnU37C2xzsIOLV9Dd5LQ9dr9mesM999xlI4q56WkvHUZw:2CJxN37CGzsIcjDdl6dtsG99j7qZW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
28c1529c80cc880dd6115e1a77da925b_JaffaCakes118

Files

28c1529c80cc880dd6115e1a77da925b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8365ffec781de3f914d89a19788db090

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aaaa
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ