12d99e9e1887729830ac5ba112b4868a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12d99e9e1887729830ac5ba112b4868a_JaffaCakes118
Size

40KB
MD5

12d99e9e1887729830ac5ba112b4868a
SHA1

cea8c76235dc00e24f841430981fad473a455475
SHA256

88ca2abfd7bf3cf9879f2be910ab5f668cfbf11cbbaa6892fabce2f22aefd79f
SHA512

4795c0df94de85baacadb88d5dbf254844b5854dffdcb711f5667b3225e8bac1f2f7fd595b3dc2c47271167187fcc68560cc5d3929ca0c65fd373f913e878de5
SSDEEP

768:CHnBxIxQxmxIvtRRoTaIaQalazaBq6Nmgmlr68Fgl+0a:CH/4gi6RRouB5YOh8O8Fgza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12d99e9e1887729830ac5ba112b4868a_JaffaCakes118

Files

12d99e9e1887729830ac5ba112b4868a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e0bd033e4fa972fa980d6b728a6b4ec9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord692
MethCallEngine
ord514
ord660
ord662
ord667
ord591
ord592
ord595
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord539
ord680
ord682
ord685
ord100
ord610
ord541

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ