1b1341192ac61a3f80343d94f18dc613_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b1341192ac61a3f80343d94f18dc613_JaffaCakes118
Size

260KB
MD5

1b1341192ac61a3f80343d94f18dc613
SHA1

7c75a25947a2cb0fc0bb21495382966dfa09d3d4
SHA256

93cfba10bf0e5ff1533f41af91dbd1d30e5668dd316cbdc3528d06a8fc798be1
SHA512

6e4f9b88f78face1679a7fb2c79b5e710db49c4a6046cf1ba5d9e5f3fc313b3dcf8344d487325c72d37bb3bb06652270842524c9780fff9af1e4d1253df4e503
SSDEEP

3072:52Hjf81AIW8nJdPUNKhaVwhxuIeoqkxDNow0LdEWeli12fN:52HymwhxuI3NNovLTeli12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1341192ac61a3f80343d94f18dc613_JaffaCakes118

Files

1b1341192ac61a3f80343d94f18dc613_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ecefa2a091aae0a6ed686c5c1978f53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord595
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord573
ord681
ord685
ord100
ord616
ord617
ord650

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ