191f7fa6e5edb539733c4278c4f156f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

191f7fa6e5edb539733c4278c4f156f7_JaffaCakes118
Size

77KB
MD5

191f7fa6e5edb539733c4278c4f156f7
SHA1

144b4f07f31fcef4b3f6dc397b79f0561ea88de1
SHA256

f6d3e5b9fc7a4b4937578106839f98bb5696b8e8789749b744d0417e0a7cf44e
SHA512

d6c077c44af99f3999f64aea8f2504bd51f8b0ec961782eec43109eddaa063252c932c86f9f206d329ac4757ffca78a3197bc7eb33a8371a74bcc83e86a2b3df
SSDEEP

1536:QpS2nE3oZvolLPmiCJ2jsU4xaXnMHJwXmnYl:QpS2nE3oZvDlQYHKMHJwXmn6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191f7fa6e5edb539733c4278c4f156f7_JaffaCakes118

Files

191f7fa6e5edb539733c4278c4f156f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42817f378fb14f1b6bc2c5aa5ec3a37d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord598
ord520
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
ord563
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord572
ord573
ord681
ord578
ord685
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ