281a4a7a4a9a21aa3b0de42836c55f54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

281a4a7a4a9a21aa3b0de42836c55f54_JaffaCakes118
Size

68KB
MD5

281a4a7a4a9a21aa3b0de42836c55f54
SHA1

11930f9656c4d6f48b0dba3f1ea976d1717e10f5
SHA256

e9065e6fe10b1de79db9748843558e670a87bfc6386b39ba3bbd1b47a442f926
SHA512

f297a6dddb99a2ec457a698209710159f2772e1bb48bec8cac73a9d63e8e0c30f087ab5cc23bb15f04e82ce82062db9e8b8036ac3095db3559d9c54bfc9da06e
SSDEEP

768:ZF12woBFhvXPFUBECCPSXsulCY7zh2XscGCbZffLylyG3qXEoWTb4cQHMD:Z2wo9vOBR2XsFC1qyG3iEoWTb4cQH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
281a4a7a4a9a21aa3b0de42836c55f54_JaffaCakes118

Files

281a4a7a4a9a21aa3b0de42836c55f54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd5172696af861554a5affbc3ad604cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ