06ee6738156242b34e6b41a5d2c276e1_JaffaCakes118 | Triage

Sharing

General

Target

06ee6738156242b34e6b41a5d2c276e1_JaffaCakes118
Size

42KB
MD5

06ee6738156242b34e6b41a5d2c276e1
SHA1

872ad94c16da547cf86e02a0f0dfb9ae941eb57e
SHA256

33f1963a4729017874ec543eef695e3a2da0ad3fb5705c42e39c96bf54f496ee
SHA512

a163229612373f350cf85b117bdd19bbe827568f9a3eb7843b82ddb29dd9967f337aa60741907d200a028c9faaf85921c8c5884088df9c1bccf75ab27090d009
SSDEEP

768:KZIFKsPikGBcdi1BYMK3+iwQu1amIEMBhARnhykZDod:kIF3NPZ+rQYa7BhmnhyeMd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ee6738156242b34e6b41a5d2c276e1_JaffaCakes118

Files

06ee6738156242b34e6b41a5d2c276e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

668b90564a68c5a0016c3503c0042a77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord709
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord581

Sections

.TEXT
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ