f965182a4cc2ee955bea414297f63069_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f965182a4cc2ee955bea414297f63069_JaffaCakes118
Size

36KB
MD5

f965182a4cc2ee955bea414297f63069
SHA1

175e5399030516759e52d8203fc89331ad6eb1b5
SHA256

4fa0e0941291feb01cc4a8d2e3f1480a647852aa00fea75c86836d0ce2a4873e
SHA512

b5f2eabbe33a6d9e5b1d7a6fc28b54dbc09315f7205a18ac0e4a82c6cfa9f4cf9a7fa1cad3df6a32411680ca17f149db0b8119df2df23eebf6573cd48e3fe222
SSDEEP

384:3c2HOo97fkDASlJc5IB1dBx2SGct9JcInp5wyWq2BzSQEt:M2HOefk8NvSGctDL2Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f965182a4cc2ee955bea414297f63069_JaffaCakes118

Files

f965182a4cc2ee955bea414297f63069_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb9ab72ab5a1138ce053318c41dfd3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord660
ord598
ord306
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ord318
ProcCallEngine
ord644
ord570
ord648
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ