7e2f36377ad6406dbed6ed5c3a93150f_JaffaCakes118 | Triage

Sharing

General

Target

7e2f36377ad6406dbed6ed5c3a93150f_JaffaCakes118
Size

136KB
MD5

7e2f36377ad6406dbed6ed5c3a93150f
SHA1

6d869cdf82afdf2de216fc785e93d779fa86065e
SHA256

dc3f915d0e07cf11d74e8cea4ab1bb5aac55a4870629679d14538e5e512c4587
SHA512

915258335893a5111c6f155148482482360eaa06b87b26f13a638ca4046fe5e010c31c27c952f36bc29b777b53bb17d76f34a52cdde3774c15c6ab8d810e0b9b
SSDEEP

1536:x3R0Ytux9ANrZ8JEux+LfTM43yKu2sbGpDFfGQa04LvIrX5qnug/mAz0YC9uI4HN:tR0Fk+9x+LfFdLpDpy/ArXkuuG9uj6ex

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7e2f36377ad6406dbed6ed5c3a93150f_JaffaCakes118

Files

7e2f36377ad6406dbed6ed5c3a93150f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

399b4f7e854b5b736dc8695aa230c338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord593
ord594
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord537
ord644
ord100

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ