f01fb74180bde1c41fa05d333d196fa6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f01fb74180bde1c41fa05d333d196fa6_JaffaCakes118
Size

136KB
MD5

f01fb74180bde1c41fa05d333d196fa6
SHA1

4b836eb752ca1e0a23612b87b17d1664ce15f809
SHA256

968dddd9460d24ba21fbc3e9019fb2ce5ffe8a4d2b6a61e5ab11888e7bb8577c
SHA512

b7350e242f96db74262a72c9a245ca95382444adbaf2f47ccf880f34e3322b2001b99050aeb65767ec6264771ace05bde279f98172f2dfe5a6d3e92202fc15d9
SSDEEP

1536:g+ed7MsISffUSGyWT1m6aUS5JlsIad7BmpP2hRrLPOetJUVl6mQ:vgzGSZmo6PSmX4pPkJLzIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f01fb74180bde1c41fa05d333d196fa6_JaffaCakes118

Files

f01fb74180bde1c41fa05d333d196fa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

daf10d5294b11fc2c150901ae5ea910b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord522
ord524
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord537
ord644
ord570
ord573
ord685
ord100
ord617

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ