1912181dbd93ee36350d754859dc9c8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1912181dbd93ee36350d754859dc9c8f_JaffaCakes118
Size

74KB
MD5

1912181dbd93ee36350d754859dc9c8f
SHA1

71a2eca2971fe93a28f11b669cd1b0eee1d8b89b
SHA256

cb85eefb2c7f4d7d4762eee0cd2ea0265e6d5e475d6017cf94f76d120a41d4a0
SHA512

85b83be153b2a57515c2ce6a0bd3a97804f44a5074a370ffe452ca2bb4f906634f3ec7e1bfe2f2f6cbc0e494f0e9cda5f8555874577681a9eb05d321b0924fb9
SSDEEP

1536:yTQuhjX462eNLfcOmy+z0/gcsRS4sy/YKfKUdhFf:Of927Z2gcsRxs5WHhFf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1912181dbd93ee36350d754859dc9c8f_JaffaCakes118

Files

1912181dbd93ee36350d754859dc9c8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18f65e9f68b114e00ba1fef1106a22d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ