37752aff34bc116d5597a96cefba61e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37752aff34bc116d5597a96cefba61e7_JaffaCakes118
Size

255KB
MD5

37752aff34bc116d5597a96cefba61e7
SHA1

d717fcff36bb6b85181a56a04ef6e0271dcf8a2a
SHA256

ae946548bfc288bf8192e2c4c2d654b442600a78fa6ddfa2db50437dc945730b
SHA512

e5c93e4f1ba62516b486b1d6c8a4c5cd3d95ad76f196f89020b0eb14002fea0e134f2e1d624628699b5387fc4346daaf099b5ac181be87ccfc7fc80f775cf207
SSDEEP

1536:HOtMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wm5mcG9s:uCX0e1FB/DpKjCLHAm5i16bll3R79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37752aff34bc116d5597a96cefba61e7_JaffaCakes118

Files

37752aff34bc116d5597a96cefba61e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a436d842560ffdb1a2366cb9e2839b70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord626
ord628
ord665
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ