6017edf7c8466e3e60badf5d17083a61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6017edf7c8466e3e60badf5d17083a61_JaffaCakes118
Size

28KB
MD5

6017edf7c8466e3e60badf5d17083a61
SHA1

7cb8c6313ea6b43ce6f5e70dd7a9e572e6727963
SHA256

5234ad9c13c673ac314fbb50b56641767895f9dfb352b3d5af64660a7fc1416a
SHA512

dbbfd60ca03874daf4627133014ff538c0a66b400ae88dcba75ba7fa32e06d62d876d6a8056a2e1ae4c0ae4e72891d0252b2a894858f4e036556adafcda5fa8f
SSDEEP

192:cHce/GyRv74X1Fhf/uBMD/pugb0FuEmkfu4CXfKFv5VWAGK1OkEu:Le/GGYpsJFnCiZfWAGKEkEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6017edf7c8466e3e60badf5d17083a61_JaffaCakes118

Files

6017edf7c8466e3e60badf5d17083a61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a24d6bf9de534c5ce40733c2df904a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord644
ord537
ord576
ord100
ord616
ord617
ord619
ord546

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ