216e36e74a1ed613c65957ccc11d3cd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

216e36e74a1ed613c65957ccc11d3cd7_JaffaCakes118
Size

284KB
MD5

216e36e74a1ed613c65957ccc11d3cd7
SHA1

b40297fbec06eafbc75220e675a5b4cab690d8ec
SHA256

66e0b63d589d50863b6dffebb18764a42797c30692fcf89001bf77564c7fc331
SHA512

cabcf7696d1cb7971557ad6af7ab522dcdb685645f6e41d9ee9895403a1c86c0c64f327f33aa8d4149b8cde7129822d185ff324be8124715a2f4fc2cb7c9bf52
SSDEEP

3072:mSQ0EWVwZhKxC5Rt+k60Zh+qw6PYSsszfHZTZJ2lCP:mPA6wxmuJspr2lE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
216e36e74a1ed613c65957ccc11d3cd7_JaffaCakes118

Files

216e36e74a1ed613c65957ccc11d3cd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94499ec57ca7f8a108e513ffe23240eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord553
ord667
ord595
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord534
ProcCallEngine
ord100
ord610
ord655

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ