72ac82ca6e01a0c6b7af3a0cb7ab11a3_JaffaCakes118 | Triage

Sharing

General

Target

72ac82ca6e01a0c6b7af3a0cb7ab11a3_JaffaCakes118
Size

330KB
MD5

72ac82ca6e01a0c6b7af3a0cb7ab11a3
SHA1

05621ae4946e1c4fcb720c23cd1bd33b63eee8d4
SHA256

e632602ad695bc15c2e5c3e5c7ae7d217067bf16355b80b561d058160bc249d9
SHA512

5a86e8154b6ff1f4d645f6176aff6bcbc4231c311c573f31c821108a782194ce4838b825098afe53c3495896e23c1f867eeeb69a7d8f9d46923430e2410673ab
SSDEEP

6144:NO+i7H3iWEuJ1LqIq6mn2Bu6nQ4lA0B1BkMQmfzzyUaS/SxLQORGUEBj6l:NO+E3s0BmndWQ4lAe1Bkdg7/IQORB04

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72ac82ca6e01a0c6b7af3a0cb7ab11a3_JaffaCakes118

Files

72ac82ca6e01a0c6b7af3a0cb7ab11a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8365ffec781de3f914d89a19788db090

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aaaa
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ