98ce5d021ba40f7a2bb1035aa08793dc_JaffaCakes118 | Triage

Sharing

General

Target

98ce5d021ba40f7a2bb1035aa08793dc_JaffaCakes118
Size

780KB
MD5

98ce5d021ba40f7a2bb1035aa08793dc
SHA1

23751b00d2e23c33dc83f4fc68722fa490e9c5dc
SHA256

7b35c6381adbf11bd623eedd5a49441ea54946c25448e5e127486ade11036d24
SHA512

2a60c392d751f4adf533b22f2802a8df261f551ec87e93a419c506aabb764a9a52611b7e62d8e79ec2ea51acc7ed167e03b31e01faa7e66b206326a05f758823
SSDEEP

12288:Qxa5KJ0g3va/9UfeU7cdHca2kkCVZN6q6pjW9hyKcujTLs4E9fQb:Qxa60gcSey88a9kxEhy6o9k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
98ce5d021ba40f7a2bb1035aa08793dc_JaffaCakes118

Files

98ce5d021ba40f7a2bb1035aa08793dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11fa0e2c4a5ba5f0b17bf6a2365a3e70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord519
ord666
ord667
ord593
ord595
ord598
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord531
ord716
ord717
ProcCallEngine
ord535
ord644
ord573
ord576
ord578
ord685
ord100
ord616
ord618
ord619
ord580

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 708KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ