832f2b111403ad8ba6994a6edd624fff_JaffaCakes118 | Triage

Sharing

General

Target

832f2b111403ad8ba6994a6edd624fff_JaffaCakes118
Size

764KB
MD5

832f2b111403ad8ba6994a6edd624fff
SHA1

f4d8334159868ee2233cfa38a100f58a65651523
SHA256

8e85fd6cdb0091d060260384900869536ce00b202c00ec1627b0930808a3c93e
SHA512

0d4dccadf8e651d01cadb0895646b52169ed9c51d76764a87864351ec6801c44ec02d742bd4f90bb71f745f2c5783c6414a5a3d347a7e35d040f953de351ed03
SSDEEP

12288:h5mt0idn673b33FeokUwwwMMNoOrAAgQCRwp57HGOvQyUgSG:hwtF6wYez9IywG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
832f2b111403ad8ba6994a6edd624fff_JaffaCakes118

Files

832f2b111403ad8ba6994a6edd624fff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6860646b0b0a9283bef87e72dcc85c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 572KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ