56b84332d41b77af642eaf1707969d40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56b84332d41b77af642eaf1707969d40_JaffaCakes118
Size

24KB
MD5

56b84332d41b77af642eaf1707969d40
SHA1

c2dc328600cc8d57cd68853f6758fc126ebec4e2
SHA256

bdd862536bc260286a425fbced776d1b572a97992a2488da71f1e5d7d9c21c10
SHA512

42e313d9211d38ebbe0ba997cd580d05f6563ffe867d2d88874ecc7eb1fc04213a0d10cc0eea11fc5dab030e9aa55250d410502d8f5144ed07dab8554910ad0f
SSDEEP

192:NYZdl0jAYSnSIlV2RfrNVsRt3rxVCnWi8VIxpJYDBP6FVd61YI4TJ7Zd:2/SaVymnVCnlDb361YI4TJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56b84332d41b77af642eaf1707969d40_JaffaCakes118

Files

56b84332d41b77af642eaf1707969d40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1235ef23df4229d7ab5d6376dba9647e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord531
ProcCallEngine
ord537
ord645
ord572
ord100

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ