1fa8f38e08a3990a777a631ffb16db88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fa8f38e08a3990a777a631ffb16db88_JaffaCakes118
Size

596KB
MD5

1fa8f38e08a3990a777a631ffb16db88
SHA1

4a7b3d4b8323b728fee7147288754e81890c6e82
SHA256

c396cabbd813cf50210a17123f08c8ed5c18d1ab839266a4919d5057bdb0c12b
SHA512

9d4ec170090f24df799d1d2408b09c1cc23d16858c07b802d781f1d86c459724cfd621bbb16a1127edc3bf4ae436a52511f728a0ea2accad92886167ce87adda
SSDEEP

6144:8f2OMe3ubkPV+6oYS3OR8iFW9XDokEbEPx62TIJmyRtk3MdfT+K0chOch61lbr:8fdMe3uod+6oFeR8idkdIJmIn6chOP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fa8f38e08a3990a777a631ffb16db88_JaffaCakes118

Files

1fa8f38e08a3990a777a631ffb16db88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3bb94cbf62c8d572773142db1649bb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord695
ord589
ord698
MethCallEngine
ord518
ord666
ord593
ord595
ord520
ord522
ord631
ord524
EVENT_SINK_AddRef
ord528
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord645
ord646
ord575
ord685
ord100

Sections

.text
Size: 580KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ