01781ce9447c8c016fe9f23c5088e938_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01781ce9447c8c016fe9f23c5088e938_JaffaCakes118
Size

28KB
MD5

01781ce9447c8c016fe9f23c5088e938
SHA1

58c9ef701c8e0aa46033c2bd8618ed726350d203
SHA256

d7b4055e7dc6880e1a355d456bb30ac0befe680f3cbec8a7366a9b49e17502f4
SHA512

ee342784e7d55131e5c720ac4262c48a1fd887d2bba800f71b737f43a1bcb3918cd144f8e5b6c01dfa563c0e6a5c7db9926e9b96481152e2afd1fa39dfaa482c
SSDEEP

192:B72+POvvWCm6TfoXvv48UDiiN8Ey0GDTQh0F7VOX7bQ5oKila2CWWHY9utRYgvs3:B7NLh/vXgiQ8ViwLilxCWWHYYtRGKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01781ce9447c8c016fe9f23c5088e938_JaffaCakes118

Files

01781ce9447c8c016fe9f23c5088e938_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7825319ea1befbce6eeaa4e8702e10a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord519
ord595
ord598
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ