07072e7a8abb5d49b681d8f5ffcda08d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07072e7a8abb5d49b681d8f5ffcda08d_JaffaCakes118
Size

340KB
MD5

07072e7a8abb5d49b681d8f5ffcda08d
SHA1

333917a958dc525716932b69fa776a9f0664ca6a
SHA256

a4b0d707145ba2b9d89c18e4d2c377f125c160667a3eba7f343fd51789294b71
SHA512

cc1fbcaa875a5d4eeea39f7500b3ec98e5d534c3b828e2cca50b566cc06df38367535e64c1faabb9997e52614c90de845133f814e6ac8088988cf6d1d353e793
SSDEEP

1536:OZdskAtK0tnDjVIZjGZdEt+T789qvUhOjYY1CnMZmbQtafER+TIlyX8JWLAdKP0v:OZakAtKonvVIZqZp2IFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07072e7a8abb5d49b681d8f5ffcda08d_JaffaCakes118

Files

07072e7a8abb5d49b681d8f5ffcda08d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cc5add3afde9049479cd576972f01bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ