15f6702ffc892d11e4b76db563dfe9f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f6702ffc892d11e4b76db563dfe9f7_JaffaCakes118
Size

69KB
MD5

15f6702ffc892d11e4b76db563dfe9f7
SHA1

2d42c1be5abba25d86e5e55ba6aeeae217008680
SHA256

fbbe144afd112d807db3cb24c10c28de4213b16128476b6597eead9625bba6c5
SHA512

d8f99c4c3b3ddbc43c301fe5ed155c3a4ebf0fc461409e092e6be139cc8bc392e174b53e8a4937f540e83e95a2f9118ebc907a276154e22e5b7b87de3c5f6fd4
SSDEEP

1536:V3oa6D9dSJrRrjBJ1iLTGrsVYsF4p9JklUv:xohdSXrP1iCDp9Jk0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f6702ffc892d11e4b76db563dfe9f7_JaffaCakes118

Files

15f6702ffc892d11e4b76db563dfe9f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

414cfefe036f1c608b907a0779e4f306

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60.dll

MethCallEngine
ord665
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord570
ord648
ord685
ord578
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ