07ef56e5180ca3abb1ef9b5b5bb40b9b_JaffaCakes118 | Triage

Sharing

General

Target

07ef56e5180ca3abb1ef9b5b5bb40b9b_JaffaCakes118
Size

112KB
MD5

07ef56e5180ca3abb1ef9b5b5bb40b9b
SHA1

27d4376d9ef586307e6b9387ac326b0f1973cb3d
SHA256

41accfab07ea352d2ef65b428faf264cf4e2cc16897a737546055d28be0440e7
SHA512

4b7a31068fec52fd5a7d0da3d84711ed3478dd55d931ae54ddd713609046e92db5d16c56851cd2b6c2a746791900d2c7f71431695e28afe1e3293fd66f2b7bc7
SSDEEP

3072:YXYUPmc3wi3MvGXE9DKBX92jWxynZhbtbG:YVPtwiMvGXE9DKBX92jWx4ZFlG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07ef56e5180ca3abb1ef9b5b5bb40b9b_JaffaCakes118

Files

07ef56e5180ca3abb1ef9b5b5bb40b9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f6e1d45b04d500469fdfdf673235080

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord537
ord570
ord648
ord578
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ