524ff25bebc89a0dce7db9e88a90df7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

524ff25bebc89a0dce7db9e88a90df7e_JaffaCakes118
Size

36KB
MD5

524ff25bebc89a0dce7db9e88a90df7e
SHA1

e1659f1812f04885752034af8fb03e9f01d4f052
SHA256

cf1f723d3fd3a0c78190303e9d8685ee58aad088ef7f838adf1c75abbf5acd0e
SHA512

c1c7ee2e5f7c4e7cf388e59d3fc314996a48d80716f03885b92527b23f495b1b5966f4e8a4657116b2db554c1e4e589506cf332a14e7320b1776aefcda869b33
SSDEEP

768:KxjYRW1Hrnmt5M7fSGuz6tVpFKrYutEcMCm:6jYRw7+uqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
524ff25bebc89a0dce7db9e88a90df7e_JaffaCakes118

Files

524ff25bebc89a0dce7db9e88a90df7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f7791d50c988ead89c62d902b20da84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ