186f59ed68015461b867f9da436bf6a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

186f59ed68015461b867f9da436bf6a2_JaffaCakes118
Size

55KB
MD5

186f59ed68015461b867f9da436bf6a2
SHA1

6de6327cb83b1e67e7cc0fe5007479ca74522894
SHA256

96c9a1792240c7d5f8c036c50a58df47d1613f483bae2c1540350f5cf1ce4be1
SHA512

d2201c028353d681c93dbc7ef1fe5fae7446946773fbf117a37b0dbe949612b5d310c36da46cec24a8885aac35896a2b7673ee0bedc2304aaeec7deee47c5ac5
SSDEEP

768:pQvWjxdBMccyYl3clXy50mK9xeaixrEgTqkoiW/gXSKIrvDsH7dq4rY5HETq:pFjBZnYRci05beaAK4IrvDIq+/O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
186f59ed68015461b867f9da436bf6a2_JaffaCakes118

Files

186f59ed68015461b867f9da436bf6a2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

817ef9008c62c37a749407cc263c0e32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord517
ord626
ord667
ord593
ord594
ord595
ord598
ord521
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ord534
ProcCallEngine
ord535
ord536
ord537
ord681
ord685
ord100
ord616
ord618

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ