f9250f20d57ee450fc1f73bf5712b6af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9250f20d57ee450fc1f73bf5712b6af_JaffaCakes118
Size

480KB
MD5

f9250f20d57ee450fc1f73bf5712b6af
SHA1

0bd48228d9c5299e97cb943c7303771817ea4a7e
SHA256

ca43838726f24f048666a9076ec39001ba000b323c030be890b87207f2a18bff
SHA512

14a2ed1c8292edbcafc083624fb5cd96a4b62cd1473368b5b5741ec898d50c17c6ac68d6b461338bcc7b287565f3a8242f62022d11281b00b14b2d15f74ed0d1
SSDEEP

12288:fXAgNWHc82wpm56H0uBJIkhh6rLVk2ge0ue2tgijJPnC:/B6HoMmLVkbe0ue0jBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9250f20d57ee450fc1f73bf5712b6af_JaffaCakes118

Files

f9250f20d57ee450fc1f73bf5712b6af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262799c6edeb167dc3f40aca7c8ceae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord595
ord598
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aehe
Size: 256KB - Virtual size: 256KB