292dbae9e173c9b91850daf9cd140c6a_JaffaCakes118 | Triage

Sharing

General

Target

292dbae9e173c9b91850daf9cd140c6a_JaffaCakes118
Size

36KB
MD5

292dbae9e173c9b91850daf9cd140c6a
SHA1

ae01d0c293cce6368cf7f31c8810369a4cd8fd57
SHA256

7d63f7241c26bfb29c31368c9beb6c6539db03b838d2e431a8eddb6676bd09b9
SHA512

1821d68838919c0945f459fa6bd56cba0cd5df9d33fcc9e70af262f2dc018d4f9812379c7509082bec8ac069ce5b58a6dab906ed15b6ae37d65a72c94da66b16
SSDEEP

384:duojOdUXtLU9g9YUNvWVTm/0z0Rk1vQZb4tulNkV3ReHYfwQ:zjS6Via/0zIk1oZEEUVF4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292dbae9e173c9b91850daf9cd140c6a_JaffaCakes118

Files

292dbae9e173c9b91850daf9cd140c6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3de8e5d71aeea066bb28e3634492bd22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord666
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord570
ord648
ord576
ord100
ord610
ord612
ord616
ord618

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ