JaffaCakes118_28d751f0c266545d63626be09edfbee2 | Triage

Sharing

General

Target

JaffaCakes118_28d751f0c266545d63626be09edfbee2
Size

528KB
MD5

28d751f0c266545d63626be09edfbee2
SHA1

7627d56f519b4f5f36e1b7ea0d624c0bfeec5084
SHA256

a1c412dc3c1c311a7a6de4a07bb4e6a1000420ed39a2007303561a71668f756d
SHA512

8a9cb438ab6f2d9ac4eb9ea29dce429445231ebbac6ccc2310a38980a0e9df34dd96911978e509d7f1345eb69d7000138221467208bba7c0c9096b3dafbfb2af
SSDEEP

12288:Sg6+pQ5WuDIhCCqlSvNa92OSbjg4blvn/3QhwsxyLnxeK:Sg6+pQgHCGNa9FSP//dqMxeK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_28d751f0c266545d63626be09edfbee2

Files

JaffaCakes118_28d751f0c266545d63626be09edfbee2
.exe windows:4 windows x86 arch:x86

7fead2e56ec0147a39050023312d6b4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord645
ord570
ord681
ord100
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ