f001ac2dfbade1ebacbb08c33eb6f7e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f001ac2dfbade1ebacbb08c33eb6f7e6_JaffaCakes118
Size

84KB
MD5

f001ac2dfbade1ebacbb08c33eb6f7e6
SHA1

906e588f25a978204ade7306f194cba7b4e0c2ce
SHA256

2254a90f7ef79abad7093b21de4a505d1eae35ffd7c35920a5ae616d80eb47fe
SHA512

cec202efb2c6a5fe6bd7e905fc260e8b7e79f521ab22bfeeaaea5b870c03876fb19fadee385c6d663119280e3de07be67d4ac3729c30522b7385e305a9394dee
SSDEEP

768:tnbY56EGOGOUm0T/bI0/F/NstMlwQTOxelNmw5jR0:tn4GksIUJxdlNmKjR0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f001ac2dfbade1ebacbb08c33eb6f7e6_JaffaCakes118

Files

f001ac2dfbade1ebacbb08c33eb6f7e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba0d8ecec1929461d4b682098169f5e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord586
MethCallEngine
ord517
ord518
ord555
ord665
ord593
ord594
ord520
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord648
ord573
ord576
ord577
ord685
ord100
ord687
ord616
ord618
ord580

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ