077840b931e8e0bf674df47d2208e437_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

077840b931e8e0bf674df47d2208e437_JaffaCakes118
Size

476KB
MD5

077840b931e8e0bf674df47d2208e437
SHA1

1362f0001f5dac8a46209f9b48b74e6e3833c68b
SHA256

354c3271febf6bbee8ed61d913dbd927ab0221dff04fd6d5fb2c300e9f35fbdf
SHA512

601fe9341ab200024355438d62d57ec176e02278db5d25ae7d9e7e70c24fa4329b35f6d4b7be667ce91542d27260f92594c2f60ad9b8daba184bc9f1edc865a1
SSDEEP

6144:cPD+zGRCBq3A61PNQi1fbm47k1PNQi1fbm4hk51vmqn:cPDyGRCBw1PNLbm47k1PNLbm4hk9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077840b931e8e0bf674df47d2208e437_JaffaCakes118

Files

077840b931e8e0bf674df47d2208e437_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25b424753b39c78481a1825cd2a82aa0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
Zombie_AddRef
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ