b87e2fa2bc09a2300636ac38de201791_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b87e2fa2bc09a2300636ac38de201791_JaffaCakes118
Size

556KB
MD5

b87e2fa2bc09a2300636ac38de201791
SHA1

644cd33f6494ff65afd366f5d4b4e0972a450a09
SHA256

fa79f3d2e53366f68a366bea97e964ce6afa4b172c34c374f6fec51b7194b707
SHA512

4ba730b6d43ff16412fe95631cf6a948713801a3621c34bd0156f758d0899615532ad89c4825823d614fd6919e10cc01498d4eddbc8db5f9a296650041a22326
SSDEEP

6144:tXuxStkK7VzPi06+GREkVo5czFmBObzQz70zgADVuVAkUW39doJ/hTM8rQS+zuJh:Vj2mi0rku8FX0fUW3j85TMoQqd9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b87e2fa2bc09a2300636ac38de201791_JaffaCakes118

Files

b87e2fa2bc09a2300636ac38de201791_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d160a8117e3deaa6e19df6cd7d62e0b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
MethCallEngine
ord518
ord595
ord520
ord631
ord524
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord608
ord574
ord685
ord100
ord616

Sections

.text
Size: 524KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ