20ff4a62a24033a8d440f899689cd6b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ff4a62a24033a8d440f899689cd6b6_JaffaCakes118
Size

212KB
MD5

20ff4a62a24033a8d440f899689cd6b6
SHA1

9f1a36058fc9934362e4e8dff6d904db31f0bc2b
SHA256

45629c5bf9fa839ebe09a8a889cf4359ea0225c1fd3c43b86e79bf68dbc0f350
SHA512

b97c03e7d6c766239e59479f43ddd9e47423e912798ec4f1076a54c273cd39a8f26333d1b4a83d49c236436aa2af25671c091ec1d1fb9a8d2386804537f2a262
SSDEEP

3072:TNGTayG3xKqWTm9mPBTuwWQV5Xdx7zJUkKnM+g1Eh7BdIENT0r:TA7TBZuO5Nx7lqM+lT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ff4a62a24033a8d440f899689cd6b6_JaffaCakes118

Files

20ff4a62a24033a8d440f899689cd6b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b615268a0568f5f5ca09c8d458367e49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wwxekrw
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE