f1cd2c3bcd9569fcf67f0a079b45f688_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1cd2c3bcd9569fcf67f0a079b45f688_JaffaCakes118
Size

213KB
MD5

f1cd2c3bcd9569fcf67f0a079b45f688
SHA1

211d151ac4fa125d905f035eec7d7d300c48b54c
SHA256

cb74f50a764ff665723315e580373f043508891638e94cbed1fe23d94fea6b80
SHA512

b7cdd6cf8505eb69930b59caa079e8dfa422fe692a817be5da5ae80038e3703c6ae2ddd3ba9c39d1d943cc1d702b2ef318f193ee2201a7da84f46a04d5ed6fdf
SSDEEP

6144:1+zC8EoVBAc4MHqmziwnfsSDm5G3YOYRG1k:16jtVHqmz2SDm5GoOYRsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1cd2c3bcd9569fcf67f0a079b45f688_JaffaCakes118

Files

f1cd2c3bcd9569fcf67f0a079b45f688_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869f420480d0d554f357c711bb26e379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ