1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118 | Triage

Sharing

General

Target

1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118
Size

2.9MB
MD5

1a7df6ead561967345bd81bc38aa36f1
SHA1

d1bf6ae452f5bd9bf04160d18f93506bd3fa4c7c
SHA256

9b1adeb3426adffb30e74cc877c20d29fba2e35515943bec62dafecf2b955736
SHA512

b4cb884de6c47577f84997eb9c21a64ac93b30c1534c88bdd71d2c1b36742322c4d6e7209b2ea8b867466dc024a79d54a362c9140d5b49dcf64f67bc56a677ab
SSDEEP

49152:blkJR0kxNrpU408hG2oKzbqO0Bz99UxEX8V72aExG4bNsWkn50a86tFX80oIKMxh:BkDtVF083mp59UxEsoxZqn50a86tFXQ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118

Files

1a7df6ead561967345bd81bc38aa36f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20d7880c7df52394d0a37c2bb7d09755

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ