1b04864ec6a46cf2b03fd82fbcf3eabb_JaffaCakes118 | Triage

Sharing

General

Target

1b04864ec6a46cf2b03fd82fbcf3eabb_JaffaCakes118
Size

20KB
MD5

1b04864ec6a46cf2b03fd82fbcf3eabb
SHA1

18caf0f972446adf7f4b5d168e48103d577a97cc
SHA256

a4a595b45aeb1664ca0486264300910b54959d080e5dd9b65f2a720d6d5e4a65
SHA512

16cede6404c1a5fc5fe18b8b82e5cea027f987af852bd26dd94e6e8677e1b58832024e69c15c19fb2f3c20e84367ac75242f34852bb2075a9c494a8bd075979b
SSDEEP

96:se0Oz+yW9HSCnURq47/zEV62OJ+JoVyCZ1dlIFd9tBvPIzn8N3wZqipJOrb5Bq/1:se1C8pLzEV70BqtdRmWilXqE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b04864ec6a46cf2b03fd82fbcf3eabb_JaffaCakes118

Files

1b04864ec6a46cf2b03fd82fbcf3eabb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8365ffec781de3f914d89a19788db090

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aaaa
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ