JaffaCakes118_7aab1bc154a4883326dafdab7b2b27a0 | Triage

Sharing

General

Target

JaffaCakes118_7aab1bc154a4883326dafdab7b2b27a0
Size

284KB
MD5

7aab1bc154a4883326dafdab7b2b27a0
SHA1

dee7d97a339a09d5bad5afc3024cd3c9ae83a346
SHA256

baed69729f713c587531e876036d332ed17ee8a6865e28440615e41ca4514022
SHA512

04e363fecbd448bfdcbdf1563ac5838ef8495fc9789a7761b61e8b51fdf3e495662d94fd291b1d3dea631179261459a42ecf737ab828975db3d06620443bf36a
SSDEEP

6144:SbAkul2Yb/P0A9Y3HCQX4BVIuhS5v19fCSFxuo:Nkur/P0A9Y3iV5hCvLCSfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7aab1bc154a4883326dafdab7b2b27a0

Files

JaffaCakes118_7aab1bc154a4883326dafdab7b2b27a0
.exe windows:4 windows x86 arch:x86

ca8429532ad6a269269b07d6e571af9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
MethCallEngine
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord644
ord685
ord578
ord100
ord617
ord581

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ