006ceb154ad0bd5bb5abbfb7f1ea1f7c_JaffaCakes118 | Triage

Sharing

General

Target

006ceb154ad0bd5bb5abbfb7f1ea1f7c_JaffaCakes118
Size

24KB
MD5

006ceb154ad0bd5bb5abbfb7f1ea1f7c
SHA1

71fea3a1c26b07c6043a1507d92c4f91e2f028e3
SHA256

9fa30588b640190133506d6f0676cc8904c9b2442d489729e7e060c1b1fa05f6
SHA512

d4d41edfd9d3548f538110b518d6a1327840e87d8f04fac74a26f6c83c15b6b968ca9439d3ae7f429d81579332d587204142a2aead5d993c9480e8845d707012
SSDEEP

384:KOX6H1jxakVWiiggB7GbhyLrUE5OQGOX6H1DOX6H1chf:fX69xRVF+GMLJ5O6X60X6uf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006ceb154ad0bd5bb5abbfb7f1ea1f7c_JaffaCakes118

Files

006ceb154ad0bd5bb5abbfb7f1ea1f7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4f83761c37f13a67f79f198cf1da84b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord669
ord303
ord598
ord309
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord716
ord531
ProcCallEngine
ord537
ord645
ord570
ord571
ord100
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ