1960df922719bbe2421cd42ab7c4c05d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1960df922719bbe2421cd42ab7c4c05d_JaffaCakes118
Size

48KB
MD5

1960df922719bbe2421cd42ab7c4c05d
SHA1

190e7222a32fc26e2fd2c32970b34e0f9a1d7330
SHA256

c823c03d7fe7170f73e0f0b8a7e09a2224aeaa564550e90d1f75f0e8b7c8c17a
SHA512

34e73ad3a1a8d86d679db2060f0510a74036616c3a1d1839998eff866f3631fb14882365e3bdf6f69d5b379feaf08d331b9850030c93a2d2ff43c8d82cd77100
SSDEEP

384:qOLqomrSn11+sNWHiccKpw8knM/yJGWQfGDdBegm9eVkjgFV8Ni18ED0W8JHWCbm:qmv11JNKic9pw8kM/QjEj2ypxXlFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1960df922719bbe2421cd42ab7c4c05d_JaffaCakes118

Files

1960df922719bbe2421cd42ab7c4c05d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45399d0f174b6643e58d48850c81faf3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord300
ord595
ord599
ord306
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ProcCallEngine
ord644
ord537
ord645
ord572
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ