f11388dce0534800c510bd20552ced8c_JaffaCakes118 | Triage

Sharing

General

Target

f11388dce0534800c510bd20552ced8c_JaffaCakes118
Size

755KB
MD5

f11388dce0534800c510bd20552ced8c
SHA1

327b2cf08ed60648482fba93da189cd27d07c2b8
SHA256

cef0d7a727b5e1381a90e3f9357dac9d682eb0a35df0dd7dc14ea826840ecf59
SHA512

66c0d02cbe5eabe34eec7807e438c211c33f63f739e036a18f93203bfdd967bd1653544757ff7f5cfb3a3925b887997318592cc5c9ffdb0307b1c8b3630c2e83
SSDEEP

12288:n/niCwni7ped1WRmo4B25bQnOatMAmE4jet843A/yYe4kjxd6JVJRV70zwfK0v:n/nili25o4B2BQnOatMNE4jee43djn6z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f11388dce0534800c510bd20552ced8c_JaffaCakes118

Files

f11388dce0534800c510bd20552ced8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37f610131aa5a476a54136a1c5b14adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord519
ord660
ord665
ord666
ord595
ord596
ord521
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord536
ord570
ord681
ord100
ord613
ord619
ord543
ord544
ord546
ord547
ord581

Sections

.text
Size: 746KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ