f6edba13af961bbbaef2e7f18e739fc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6edba13af961bbbaef2e7f18e739fc3_JaffaCakes118
Size

481KB
MD5

f6edba13af961bbbaef2e7f18e739fc3
SHA1

cb73e6eb87181e7ab5427bc8656067fb851e84a8
SHA256

d4dc36434aa6cd4b4338a04e59b62c610d289b0f69d69424398464e99cf86aa9
SHA512

268055a0d2af7400376243ec5a5474a3abb472ecbb25248e44b16093e6c0961d65c9d0ac2aad37feea60492e4f95fa16e6ab3eb3aef2c66216de92c56196f407
SSDEEP

3072:8SQ1TZZS+48aXNZzVfhVJkZqr+p2gK9suXmy6FjThXCytT7Zap9qSffN5m9j3sZL:9e3QuZXpjhZlSHNk9Ala2dJs14OW5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6edba13af961bbbaef2e7f18e739fc3_JaffaCakes118

Files

f6edba13af961bbbaef2e7f18e739fc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

825fa7e01003fb8a45b79d0eba2bd344

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord644
ord100

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ