35e413b6c9f5dad718473e7792cc4b83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35e413b6c9f5dad718473e7792cc4b83_JaffaCakes118
Size

72KB
MD5

35e413b6c9f5dad718473e7792cc4b83
SHA1

32b3f369787feb814097f1dd9128054f708a8516
SHA256

f91870a4e2f133efff178ef4b52897101af10b26f3186dd8f638a52ab6d9ff11
SHA512

781c96ea875c791e88c3d689cd096d578dbfa6b9b83af23c596213f03e15da174eabcd7d7f68bdbfd8483fbc30b31190cf5c78ada2e2f8b170b110971d65f69f
SSDEEP

768:fqVJX+FhwspRMbQ+PuXyyyBW+9BkhmODVjyxIbRXh:fqVJuFyZbwXClHsyxIdx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35e413b6c9f5dad718473e7792cc4b83_JaffaCakes118

Files

35e413b6c9f5dad718473e7792cc4b83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9450feb51f87ed1f9c57f6ec4ff4bb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursorPos

msvbvm60

ord690
ord187
MethCallEngine
ord516
ord593
ord300
ord594
ord595
ord598
ord306
ord307
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ord318
ProcCallEngine
ord644
ord647
ord649
ord685
ord100
ord689
ord616

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ