075b9d59cb3dc290a9a4442178c99a0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

075b9d59cb3dc290a9a4442178c99a0e_JaffaCakes118
Size

120KB
MD5

075b9d59cb3dc290a9a4442178c99a0e
SHA1

0cc72b05a330f29ffb4e52e17d0a0b285793cc80
SHA256

b6f310ff29bad1b1a7703fcf352cb23088f4cf21067b048efc5f5407a4cc9718
SHA512

52c4189f66bd53dcad1d0f447bca29d6f0479cea07a543e24c315ee43caa0795dfdc1afe33e6fc915ff2de55eb5a337d6f8071b362ec5fb7e2b53a00fc84b1f7
SSDEEP

3072:Dua2nsBAlGm9OfLvcCiOVWjsEgqp+/lHkwa8fBQ+d:TPVSwIWkfuBQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
075b9d59cb3dc290a9a4442178c99a0e_JaffaCakes118

Files

075b9d59cb3dc290a9a4442178c99a0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edea5e9e67df8f8b24cf8e59d27d44bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW

msvbvm60

ord516
ord519
ord666
ord667
ord593
ord594
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ord716
ord717
ProcCallEngine
ord644
ord576
ord685
ord100
ord616
ord618

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ